{"id":35693,"date":"2019-10-31T22:05:48","date_gmt":"2019-10-31T19:05:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-amd-sev-pozvolyayushhaya-opredelit-klyuchi-shifrovaniya\/"},"modified":"2019-10-31T22:05:48","modified_gmt":"2019-10-31T19:05:48","slug":"uyazvimost-v-amd-sev-pozvolyayushhaya-opredelit-klyuchi-shifrovaniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-amd-sev-pozvolyayushhaya-opredelit-klyuchi-shifrovaniya","title":{"rendered":"Sebezhet\u0151s\u00e9g az AMD SEV-ben, amely lehet\u0151v\u00e9 teszi a titkos\u00edt\u00e1si kulcsok meghat\u00e1roz\u00e1s\u00e1t","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Google Cloud csapat fejleszt\u0151i felfedeztek<\/a><\/noindex> az AMD SEV (Secure Encrypted Virtualization) technol\u00f3gia implement\u00e1ci\u00f3j\u00e1ban l\u00e9v\u0151 s\u00e9r\u00fcl\u00e9kenys\u00e9g (CVE-2019-9836), amely lehet\u0151v\u00e9 teszi a v\u00e9delemmel ell\u00e1tott adatok megs\u00e9rt\u00e9s\u00e9t. Az AMD SEV hardver szinten \u00e1tl\u00e1that\u00f3 mem\u00f3ria titkos\u00edt\u00e1st biztos\u00edt a virtu\u00e1lis g\u00e9pek sz\u00e1m\u00e1ra, amelyben a visszafejtett adatokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s csak a jelenlegi vend\u00e9g oper\u00e1ci\u00f3s rendszer \u00e1ltal lehets\u00e9ges, m\u00edg a t\u00f6bbi virtu\u00e1lis g\u00e9p \u00e9s a hypervisor a mem\u00f3riahoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s megk\u00eds\u00e9rl\u00e9s\u00e9n\u00e9l titkos\u00edtott adathalmat kap.<\/p>\n

A felfedezett probl\u00e9ma lehet\u0151v\u00e9 teszi a titkos PDH-kulcs tartalm\u00e1nak teljes helyre\u00e1ll\u00edt\u00e1s\u00e1t, amelyet egy k\u00fcl\u00f6n v\u00e9dett processzor, a PSP (AMD Security Processor) szintj\u00e9n dolgoznak fel, \u00e9s amely nem el\u00e9rhet\u0151 az alap oper\u00e1ci\u00f3s rendszer sz\u00e1m\u00e1ra.
\nA PDH-kulcs birtok\u00e1ban a t\u00e1mad\u00f3 ezut\u00e1n helyre\u00e1ll\u00edthatja a munkamenet kulcsot \u00e9s a titkos\u00edtott adatokat gener\u00e1l\u00f3 titkos szekvenci\u00e1t, \u00edgy hozz\u00e1f\u00e9rhet a titkos\u00edtott adatokhoz. <\/p>\n

A s\u00e9r\u00fcl\u00e9kenys\u00e9g az elliptikus g\u00f6rb\u00e9k (ECC) implement\u00e1ci\u00f3j\u00e1nak hib\u00e1ib\u00f3l ered, amelyek titkos\u00edt\u00e1shoz haszn\u00e1latosak, lehet\u0151v\u00e9 t\u00e9ve a t\u00e1mad\u00e1st<\/a><\/noindex> a g\u00f6rbe param\u00e9tereinek helyre\u00e1ll\u00edt\u00e1s\u00e1ra. A v\u00e9dett virtu\u00e1lis g\u00e9p ind\u00edt\u00f3parancs\u00e1nak v\u00e9grehajt\u00e1sa sor\u00e1n a t\u00e1mad\u00f3 olyan g\u00f6rbeparam\u00e9tereket k\u00fcldhet, amelyek nem felelnek meg a NIST \u00e1ltal aj\u00e1nlott param\u00e9tereknek, ami alacsony rend\u0171 pontok \u00e9rt\u00e9keinek haszn\u00e1lat\u00e1hoz vezet a z\u00e1rtkulcs\u00fa adatok szorz\u00e1si m\u0171veleteiben. <\/p>\n

Az ECDH protokoll v\u00e9detts\u00e9ge k\u00f6zvetlen\u00fcl f\u00fcgg<\/a><\/noindex> t\u00f3l a g\u00f6rbe kezdeti pontj\u00e1nak<\/a><\/noindex> rendj\u00e9t\u0151l, amelynek diszk\u00e9t logaritmiz\u00e1l\u00e1sa nagyon neh\u00e9z feladatot jelent. Az AMD SEV k\u00f6rnyezeti inicializ\u00e1l\u00e1s\u00e1nak egyik l\u00e9p\u00e9s\u00e9ben a z\u00e1rtkulcs\u00fa sz\u00e1m\u00edt\u00e1sok sor\u00e1n a felhaszn\u00e1l\u00f3t\u00f3l sz\u00e1rmaz\u00f3 param\u00e9tereket haszn\u00e1lnak. L\u00e9nyeg\u00e9ben k\u00e9t pont szorz\u00e1sa t\u00f6rt\u00e9nik, amelyek k\u00f6z\u00fcl az egyik a z\u00e1rtkulcshoz tartozik. Ha a m\u00e1sodik pont alacsony rend\u0171 pr\u00edmsz\u00e1mokhoz kapcsol\u00f3dik, a t\u00e1mad\u00f3 a modullal v\u00e9gzett exponenci\u00e1l\u00e1s sor\u00e1n haszn\u00e1lt els\u0151 pont param\u00e9tereit (a haszn\u00e1lt modulus bitjei) vissza\u00e1ll\u00edthatja a lehets\u00e9ges \u00e9rt\u00e9kek keres\u00e9s\u00e9vel. A z\u00e1rtkulcs meghat\u00e1roz\u00e1s\u00e1hoz a kiv\u00e1lasztott sima sz\u00e1mok t\u00f6red\u00e9keit ezut\u00e1n a k\u00ednai marad\u00e9kt\u00e9tel seg\u00edts\u00e9g\u00e9vel<\/a><\/noindex>.<\/p>\n

lehet \u00f6sszeilleszteni. A probl\u00e9ma a 0.17 build 11 verzi\u00f3j\u00fa SEV firmware-t haszn\u00e1l\u00f3 AMD EPYC szerverplatformokat \u00e9rinti. Az AMD m\u00e1r kiadta<\/noindex> A firmware update has been released that adds restrictions on the use of points that do not comply with the NIST curve. Previously generated certificates for PDH keys remain valid, allowing an attacker to perform a migration attack from environments protected against the vulnerability to those exposed to the issue. The possibility of rolling back the firmware version to an older vulnerable release is also mentioned, but this has not yet been confirmed.<\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Cloud \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-9836) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 AMD SEV (Secure Encrypted Virtualization), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0434\u0430\u043d\u043d\u043e\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0435. AMD SEV \u043d\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043c\u0435\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0435\u043a\u0443\u0449\u0430\u044f \u0433\u043e\u0441\u0442\u0435\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u0430 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u043f\u0440\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35693","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerability in AMD SEV that allows encryption keys to be identified | ProHoster","description":"Developers from the Google Cloud team have discovered a vulnerability (CVE-2019-9836) in the implementation of AMD SEV (Secure).","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-amd-sev-pozvolyayushhaya-opredelit-klyuchi-shifrovaniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 AMD SEV, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Cloud \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-9836) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 AMD SEV (Secure.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-amd-sev-pozvolyayushhaya-opredelit-klyuchi-shifrovaniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:48+00:00","article:modified_time":"2019-10-31T19:05:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35693","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:24:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:57:46","updated":"2026-01-22 00:24:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/35693","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=35693"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/35693\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=35693"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=35693"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=35693"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}