3 ms·
Your argument is just smart-ass argument for the sake of argumentation. Having CPU state that somehow leaks information past operating system is not realistic
by hannibal5 13y ago
Your argument is just smart-ass argument for the sake of argumentation.
Having CPU state that somehow leaks information past operating system is not realistic road for take. It would be known for thousands of Intel engineers.
Having tiny feature in chip that contains purposefully but not obviously vulnerable design that needs high level cryptographic knowledge to understand and compromises security is completely different matter.
EDIT comparing potential side channel attack to the possibility of weaken practically all ssl keys that use Intel chips is error in scale. Side channel attacks would work against specific targeted people. Weakening random numbers would work at the mass surveillance level.
- tptacek 13y agoThis is a baffling comment given that researchers have alrady found multiple side channels in Intel CPUs that have created viable key leaking attacks. It's possible to have this problem merely by accident.
- hannibal5 13y agoComparing potential side channel attack to the possibility to weakening practically all ssl keys that use Intel chips makes massive error in scale. Side channel attacks would work against specific targeted people. Weakening random numbers would work at the mass surveillance level.
- nightcracker 13y agoSuch side channels can be avoided in a proper implementation by avoid things like table lookups and conditionals based on secret data.