{"id":104416,"date":"2022-06-15T15:36:54","date_gmt":"2022-06-15T13:36:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/hertzbleed-novoe-semejstvo-atak-po-storonnim-kanalam-zatragivayushhee-sovremennye-cpu"},"modified":"2022-06-15T15:36:54","modified_gmt":"2022-06-15T13:36:54","slug":"hertzbleed-novoe-semejstvo-atak-po-storonnim-kanalam-zatragivayushhee-sovremennye-cpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/hertzbleed-novoe-semejstvo-atak-po-storonnim-kanalam-zatragivayushhee-sovremennye-cpu","title":{"rendered":"Hertzbleed \u2014 nov\u00e1 rodina \u00fatok\u016f na vedlej\u0161\u00ed kan\u00e1ly, kter\u00e1 t\u00fdk\u00e1 modern\u00ed CPU.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdzkumn\u00edk\u016f z Texask\u00e9, Illinois a Washingtonsk\u00e9 univerzity odhalila informace o nov\u00e9 rodin\u011b \u00fatok\u016f prost\u0159ednictv\u00edm bo\u010dn\u00edch kan\u00e1l\u016f (CVE-2022-23823, CVE-2022-24436), kter\u00e9 z\u00edskaly k\u00f3dov\u00e9 jm\u00e9no Hertzbleed. Navr\u017een\u00e1 metoda \u00fatoku je zalo\u017eena na vlastnostech dynamick\u00e9ho \u0159\u00edzen\u00ed frekvence v modern\u00edch procesorech a t\u00fdk\u00e1 se v\u0161ech aktu\u00e1ln\u00edch CPU Intel a AMD. Potenci\u00e1ln\u011b se probl\u00e9m m\u016f\u017ee projevovat i u procesor\u016f jin\u00fdch v\u00fdrobc\u016f, kter\u00e9 podporuj\u00ed dynamickou zm\u011bnu frekvence, nap\u0159\u00edklad v ARM syst\u00e9mech, ale proveden\u00fd v\u00fdzkum se omezil na testov\u00e1n\u00ed \u010dip\u016f Intel a AMD. Zdrojov\u00e9 k\u00f3dy s implementac\u00ed \u00fatoku byly zve\u0159ejn\u011bny na GitHubu (implementace byla testov\u00e1na na po\u010d\u00edta\u010di s CPU Intel i7-9700). <\/p>\n

Pro optimalizaci spot\u0159eby energie a prevenci p\u0159eh\u0159\u00e1t\u00ed procesory dynamicky m\u011bn\u00ed frekvenci v z\u00e1vislosti na zat\u00ed\u017een\u00ed, co\u017e vede ke zm\u011bn\u011b v\u00fdkonu a ovliv\u0148uje dobu vykon\u00e1v\u00e1n\u00ed operac\u00ed (zm\u011bna frekvence o 1 Hz vede ke zm\u011bn\u011b v\u00fdkonu o 1 takt za sekundu). B\u011bhem proveden\u00e9ho v\u00fdzkumu bylo zji\u0161t\u011bno, \u017ee za ur\u010dit\u00fdch podm\u00ednek na procesorech AMD a Intel m\u00e1 zm\u011bna frekvence p\u0159\u00edmou korelaci s zpracov\u00e1van\u00fdmi daty, co\u017e nap\u0159\u00edklad znamen\u00e1, \u017ee doba v\u00fdpo\u010dtu operac\u00ed «2022 + 23823» a «2022 + 24436» se bude li\u0161it. Na z\u00e1klad\u011b anal\u00fdzy rozd\u00edl\u016f doby vykon\u00e1v\u00e1n\u00ed operac\u00ed s r\u016fzn\u00fdmi daty je mo\u017en\u00e9 nep\u0159\u00edmo obnovit informace vyu\u017e\u00edvan\u00e9 b\u011bhem v\u00fdpo\u010dt\u016f. P\u0159itom v rychl\u00fdch s\u00edt\u00edch s p\u0159edv\u00eddateln\u00fdmi konstantn\u00edmi zpo\u017ed\u011bn\u00edmi lze \u00fatok prov\u00e9st vzd\u00e1len\u011b, hodnocen\u00edm doby vykon\u00e1v\u00e1n\u00ed po\u017eadavk\u016f. <\/p>\n

P\u0159i \u00fasp\u011b\u0161n\u00e9m proveden\u00ed \u00fatoku umo\u017e\u0148uj\u00ed odhalen\u00e9 probl\u00e9my ur\u010dovat tajn\u00e9 kl\u00ed\u010de na z\u00e1klad\u011b anal\u00fdzy doby v\u00fdpo\u010dt\u016f v kryptografick\u00fdch knihovn\u00e1ch, kter\u00e9 pou\u017e\u00edvaj\u00ed algoritmy, jejich\u017e matematick\u00e9 v\u00fdpo\u010dty jsou v\u017edy prov\u00e1d\u011bny za konstantn\u00ed dobu, nez\u00e1visle na povaze zpracov\u00e1van\u00fdch dat. Takov\u00e9 knihovny byly pova\u017eov\u00e1ny za chr\u00e1n\u011bn\u00e9 proti \u00fatok\u016fm prost\u0159ednictv\u00edm bo\u010dn\u00edch kan\u00e1l\u016f, ale jak se uk\u00e1zalo, doba v\u00fdpo\u010dtu je ur\u010dov\u00e1na nejen algoritmem, ale i vlastnostmi pr\u00e1ce procesoru. <\/p>\n

Jako praktick\u00fd p\u0159\u00edklad, kter\u00fd ukazuje proveditelnost navrhovan\u00e9 metody, byla demonstrov\u00e1na \u00fatok na implementaci mechanismu inkapsulace kl\u00ed\u010d\u016f SIKE (Supersingular Isogeny Key Encapsulation), kter\u00fd se dostal do fin\u00e1le sout\u011b\u017ee o postkvantov\u00e9 kryptosyst\u00e9my po\u0159\u00e1dan\u00e9 N\u00e1rodn\u00edm institutem standard\u016f a technologi\u00ed USA (NIST) a je pova\u017eov\u00e1n za chr\u00e1n\u011bn\u00fd proti \u00fatok\u016fm prost\u0159ednictv\u00edm vedlej\u0161\u00edch kan\u00e1l\u016f. V pr\u016fb\u011bhu experimentu se pomoc\u00ed nov\u00e9 varianty \u00fatoku zalo\u017een\u00e9 na zvolen\u00e9m \u0161ifrotextu (postupn\u00e9 vyb\u00edr\u00e1n\u00ed na z\u00e1klad\u011b manipulac\u00ed se za\u0161ifrovan\u00fdm textem a z\u00edsk\u00e1n\u00ed jeho de\u0161ifrov\u00e1n\u00ed) poda\u0159ilo pln\u011b obnovit kl\u00ed\u010d pou\u017e\u00edvan\u00fd pro \u0161ifrov\u00e1n\u00ed, p\u0159i\u010dem\u017e m\u011b\u0159en\u00ed byla prov\u00e1d\u011bna z vzd\u00e1len\u00e9ho syst\u00e9mu, navzdory pou\u017eit\u00ed implementace SIKE s konstantn\u00edm \u010dasem v\u00fdpo\u010dt\u016f. Na ur\u010den\u00ed 364-bitov\u00e9ho kl\u00ed\u010de p\u0159i pou\u017eit\u00ed implementace CIRCL bylo vynalo\u017eeno 36 hodin, zat\u00edmco na PQCrypto-SIDH to bylo 89 hodin. <\/p>\n

Spole\u010dnosti Intel a AMD p\u0159iznaly, \u017ee jejich procesory jsou n\u00e1chyln\u00e9 k t\u00e9to problematice, ale nepl\u00e1nuj\u00ed zablokovat zranitelnost prost\u0159ednictv\u00edm aktualizace mikroprogramu, proto\u017ee je nemo\u017en\u00e9 ji hardwarov\u011b odstranit bez v\u00fdznamn\u00e9ho vlivu na v\u00fdkon. M\u00edsto toho byly v\u00fdvoj\u00e1\u0159\u016fm kryptografick\u00fdch knihoven poskytnuty doporu\u010den\u00ed k programov\u00e9mu zablokov\u00e1n\u00ed \u00faniku informac\u00ed p\u0159i vykon\u00e1v\u00e1n\u00ed d\u016fv\u011brn\u00fdch v\u00fdpo\u010dt\u016f. Spole\u010dnosti Cloudflare a Microsoft ji\u017e implementovaly podobnou ochranu do sv\u00fdch verz\u00ed SIKE, co\u017e vedlo k poklesu v\u00fdkonu CIRCL o 5 % a PQCrypto-SIDH o 11 %. Jako dal\u0161\u00ed alternativu k blokov\u00e1n\u00ed zranitelnosti v BIOSu nebo ovlada\u010di je mo\u017en\u00e9 deaktivovat re\u017eimy \u201eTurbo Boost\u201c, \u201eTurbo Core\u201c nebo \u201ePrecision Boost\u201c, av\u0161ak tato zm\u011bna povede k dramatick\u00e9mu poklesu v\u00fdkonu. <\/p>\n

Spole\u010dnosti Intel, Cloudflare a Microsoft byly o probl\u00e9mu informov\u00e1ny ve t\u0159et\u00edm \u010dtvrtlet\u00ed 2021, zat\u00edmco spole\u010dnost AMD v prvn\u00edm \u010dtvrtlet\u00ed 2022, ale na \u017e\u00e1dost Intelu bylo ve\u0159ejn\u00e9 zve\u0159ejn\u011bn\u00ed informac\u00ed o probl\u00e9mu odlo\u017eeno do 14. \u010dervna 2022. P\u0159\u00edtomnost probl\u00e9mu byla potvrzena u procesor\u016f pro stoln\u00ed po\u010d\u00edta\u010de a notebooky zalo\u017een\u00fdch na 8.-11. generaci mikroarchitektury Intel Core, jako\u017e i u r\u016fzn\u00fdch desktopov\u00fdch, mobiln\u00edch a serverov\u00fdch procesor\u016f AMD Ryzen, Athlon, A-Series a EPYC (v\u00fdzkumn\u00edci demonstrovali metodu na CPU Ryzen s mikroarchitekturou Zen 2 a Zen 3).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e, \u0418\u043b\u043b\u0438\u043d\u043e\u0439\u0441\u0441\u043a\u043e\u0433\u043e \u0438 \u0412\u0430\u0448\u0438\u043d\u0433\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0435 \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c (CVE-2022-23823, CVE-2022-24436), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u043c \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Hertzbleed. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044f\u0445 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0430\u0441\u0442\u043e\u0442\u043e\u0439 \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 CPU Intel \u0438 AMD. \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104416","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hertzbleed \u2014 nov\u00e1 rodina \u00fatok\u016f p\u0159es postrann\u00ed kan\u00e1ly, kter\u00e1 zasahuje modern\u00ed CPU | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z Texask\u00e9, Illinoisk\u00e9 a Washingtonsk\u00e9 univerzity odhalila informace o nov\u00e9 rodin\u011b \u00fatok\u016f p\u0159es postrann\u00ed kan\u00e1ly (CVE-2022-23823, CVE-2022-24436), zn\u00e1m\u00e9 pod k\u00f3dov\u00fdm n\u00e1zvem Hertzbleed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/hertzbleed-novoe-semejstvo-atak-po-storonnim-kanalam-zatragivayushhee-sovremennye-cpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Hertzbleed \u2014 \u043d\u043e\u0432\u043e\u0435 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 CPU | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e, \u0418\u043b\u043b\u0438\u043d\u043e\u0439\u0441\u0441\u043a\u043e\u0433\u043e \u0438 \u0412\u0430\u0448\u0438\u043d\u0433\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0435 \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c (CVE-2022-23823, CVE-2022-24436), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u043c \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Hertzbleed.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/hertzbleed-novoe-semejstvo-atak-po-storonnim-kanalam-zatragivayushhee-sovremennye-cpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-06-15T13:36:54+00:00","article:modified_time":"2022-06-15T13:36:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104416","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:56:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-06-15 13:38:03","updated":"2026-01-25 11:56:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104416","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104416"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104416\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104416"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104416"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104416"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}