3 ms·
It's not plug-and-play. It still needs a custom firmware: "(...)The presented methods allow us to deploy a custom SEV firmware on the AMD-SP, which enables an a
by jlourenco27 5y ago
It's not plug-and-play. It still needs a custom firmware:
"(...)The presented methods allow us to deploy a custom SEV firmware on the AMD-SP, which enables an adversary to decrypt a VM's memory.(..)"
- londons_explore 5y agoInstallRogueFirmware.exe. double-click. This is about protecting a VM from people who have admin rights and hardware access outside the VM.
- floatboth 5y agoVoltage glitching is no double-click. It would be a huge embarrassment to AMD if just double-click defeated the secure processor's firmware authentication. This requires electrically messing with the power supply of the processor.
- api 5y agoSo this means the secure VM feature is secure up to the threat model of someone able to crack open the hardware. Honestly that's kind of what I would have expected. Just making it almost impossible to get VM memory remotely by owning the hypervisor is pretty good and reduces your attack surface to people who can get into the data center and have electronics expertise.