Gulu la ofufuza ochokera ku Graz University of Technology (Austria), yomwe kale imadziwika kuti ikupanga zida za MDS, NetSpectre, Throwhammer ndi ZombieLoad, idawulula zambiri za kuwukira kwatsopano kwanjira (CVE-2021-46778) pamzere wa AMD processor scheduler. , yomwe imagwiritsidwa ntchito pokonzekera kuchitidwa kwa malangizo m'magawo osiyanasiyana a CPU. Kuwukirako, komwe kumatchedwa SQUIP, kumakupatsani mwayi wodziwa zomwe zimagwiritsidwa ntchito powerengera munjira ina kapena makina enieni kapena kukonza njira yolumikizirana yobisika pakati pa njira kapena makina omwe amakupatsani mwayi wosinthana ndi data podutsa njira zowongolera zolowera.
Ma CPU a AMD otengera 2000st, 5000nd, and 3000rd generation Zen microarchitectures (AMD Ryzen XNUMX-XNUMX, AMD Ryzen Threadripper, AMD Athlon XNUMX, AMD EPYC) amakhudzidwa akamagwiritsa ntchito Simultaneous Multithreading Technology (SMT). Ma processor a Intel satha kuukira, chifukwa amagwiritsa ntchito mzere umodzi wokha, pomwe mapurosesa a AMD omwe ali pachiwopsezo amagwiritsa ntchito mizere yosiyana pagawo lililonse. Monga njira yothanirana ndi kutayikira kwa chidziwitso, AMD idalimbikitsa kuti opanga azigwiritsa ntchito ma aligorivimu omwe nthawi zonse amawerengera masamu nthawi zonse, mosasamala kanthu za mtundu wa data yomwe ikukonzedwa, komanso kupewa kupanga nthambi potengera zachinsinsi.
Kuwukiraku kumatengera kuwunika kwa kuchuluka kwa mikangano (mulingo wa mikangano) m'mizere yosiyana siyana ndipo imachitika kudzera muyeso la kuchedwa poyambira macheke omwe amachitidwa mu ulusi wina wa SMT pa CPU yomweyi. Kuti muwunike zomwe zili, njira ya Prime + Probe idagwiritsidwa ntchito, zomwe zikutanthauza kuti mudzaze pamzerewu ndi ziwerengero zamtengo wapatali ndikuzindikira zosintha poyesa nthawi yofikira pakubwezeretsanso.
Pa kuyesera, ofufuza anatha kwathunthu recreate payekha 4096-bit RSA kiyi ntchito kulenga siginecha digito ntchito mbedTLS 3.0 cryptographic laibulale, amene amagwiritsa aligorivimu Montgomery kukweza chiwerengero kuti modulo mphamvu. Zinatengera njira 50500 kuti zidziwe chinsinsi. Nthawi yonse yakuukira idatenga mphindi 38. Zosiyanasiyana zowukira zimawonetsedwa zomwe zimapereka kutayikira pakati pa njira zosiyanasiyana ndi makina enieni oyendetsedwa ndi KVM hypervisor. Amasonyezedwanso kuti njira angagwiritsidwe ntchito kulinganiza kutengerapo zobisika deta pakati makina pafupifupi pa mlingo wa 0.89 Mbit/s ndi pakati pa ndondomeko pa mlingo wa 2.70 Mbit/s ndi zolakwika mlingo zosakwana 0.8%.
Source: opennet.ru