{"id":106545,"date":"2023-01-29T12:48:46","date_gmt":"2023-01-29T10:48:46","guid":{"rendered":"https:\/\/prohoster.info\/?p=106545"},"modified":"2023-02-07T12:09:03","modified_gmt":"2023-02-07T10:09:03","slug":"zavisimost-vremeni-vypolneniya-instrukczij-ot-dannyh-na-cpu-arm-i-intel","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/zavisimost-vremeni-vypolneniya-instrukczij-ot-dannyh-na-cpu-arm-i-intel","title":{"rendered":"Z\u00e1vislos\u0165 \u010dasu vykon\u00e1vania in\u0161trukci\u00ed od \u00fadajov na CPU ARM a Intel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Eric Biggers, jeden z v\u00fdvoj\u00e1rov \u0161ifry Adiantum a spr\u00e1vca pod syst\u00e9mu jadra Linux fscrypt, navrhol sadu patchov na blokovanie bezpe\u010dnostn\u00fdch probl\u00e9mov, ktor\u00e9 vznikaj\u00fa v d\u00f4sledku \u0161pecif\u00edk procesorov Intel, ktor\u00e9 nezaru\u010duj\u00fa kon\u0161tantn\u00fd \u010das vykon\u00e1vania in\u0161trukci\u00ed pre r\u00f4zne spracov\u00e1van\u00e9 d\u00e1ta. Probl\u00e9m v procesoroch Intel sa prejavuje od rodiny Ice Lake. Podobn\u00fd probl\u00e9m sa pozoruje aj v procesoroch ARM. <\/p>\n

Z\u00e1vislos\u0165 \u010dasu vykon\u00e1vania in\u0161trukci\u00ed od spracov\u00e1van\u00fdch d\u00e1t autor patchov pova\u017euje za zranite\u013enos\u0165 procesorov, preto\u017ee tak\u00e9to spr\u00e1vanie nem\u00f4\u017ee zaru\u010di\u0165 bezpe\u010dnos\u0165 kryptografick\u00fdch oper\u00e1ci\u00ed v syst\u00e9me. Mnoh\u00e9 implement\u00e1cie kryptografick\u00fdch algoritmov s\u00fa navrhnut\u00e9 tak, \u017ee d\u00e1ta nemaj\u00fa vplyv na \u010das vykon\u00e1vania in\u0161trukci\u00ed, a poru\u0161enie tohto spr\u00e1vania m\u00f4\u017ee vies\u0165 k \u00fatokom prostredn\u00edctvom bo\u010dn\u00fdch kan\u00e1lov, ktor\u00e9 obnovuj\u00fa d\u00e1ta na z\u00e1klade anal\u00fdzy \u010dasu ich spracovania. <\/p>\n

Potenci\u00e1lne z\u00e1vislos\u0165 \u010dasu vykon\u00e1vania od d\u00e1t m\u00f4\u017ee by\u0165 tie\u017e pou\u017eit\u00e1 na organizovanie \u00fatokov na definovanie d\u00e1t jadra z priestoru pou\u017e\u00edvate\u013ea. Pod\u013ea vyhl\u00e1senia Erica Biggersa, kon\u0161tantn\u00fd \u010das vykon\u00e1vania nie je zaru\u010den\u00fd ani pre in\u0161trukcie, ktor\u00e9 vykon\u00e1vaj\u00fa oper\u00e1cie s\u010d\u00edtania a XOR, a ani pre \u0161pecializovan\u00e9 in\u0161trukcie AES-NI (inform\u00e1cie nie s\u00fa potvrden\u00e9 testami, pod\u013ea in\u00fdch \u00fadajov pri n\u00e1soben\u00ed vektorov a po\u010d\u00edtan\u00ed bitov sa vyskytuje oneskorenie jeden cyklus). <\/p>\n

Na vypnutie tohto spr\u00e1vania spolo\u010dnosti Intel a ARM navrhli nov\u00e9 praporky: PSTATE-bit DIT (Data Independent Timing) pre CPU ARM a MSR-bit DOITM (Data Operand Independent Timing Mode) pre CPU Intel, ktor\u00e9 vracaj\u00fa star\u00e9 spr\u00e1vanie s kon\u0161tantn\u00fdm \u010dasom vykon\u00e1vania. Spolo\u010dnosti Intel a ARM odpor\u00fa\u010daj\u00fa zapn\u00fa\u0165 ochranu pod\u013ea potreby pre obzvl\u00e1\u0161\u0165 d\u00f4le\u017eit\u00fd k\u00f3d, ale v skuto\u010dnosti d\u00f4le\u017eit\u00e9 v\u00fdpo\u010dty sa m\u00f4\u017eu vyskytova\u0165 v ak\u00fdchko\u013evek \u010dastiach jadra a priestoru pou\u017e\u00edvate\u013ea, preto sa zva\u017euje mo\u017enos\u0165 trvalej aktiv\u00e1cie re\u017eimov DOITM a DIT pre cel\u00e9 jadro. <\/p>\n

Pre procesory ARM boli do vetvy jadra Linux 6.2 prijat\u00e9 opravy, ktor\u00e9 menia spr\u00e1vanie jadra, av\u0161ak tieto opravy sa pova\u017euj\u00fa za nedosta\u010duj\u00face, preto\u017ee pokr\u00fdvaj\u00fa len k\u00f3d jadra a nemenia spr\u00e1vanie pre pou\u017e\u00edvate\u013esk\u00fd priestor. Pre procesory Intel je aktiv\u00e1cia ochrany zatia\u013e iba v \u0161t\u00e1diu recenzovania. Meranie vplyvu opravy na v\u00fdkon zatia\u013e nebolo vykonan\u00e9, ale pod\u013ea dokument\u00e1cie Intel aktivovanie re\u017eimu DOITM zni\u017euje v\u00fdkon (napr\u00edklad kv\u00f4li vyp\u00ednaniu niektor\u00fdch optimaliz\u00e1ci\u00ed, ako je predna\u010d\u00edtanie \u0161pecifick\u00e9 pre ur\u010dit\u00e9 d\u00e1ta) a v bud\u00facich modeloch procesorov by zn\u00ed\u017eenie v\u00fdkonu mohlo by\u0165 intenz\u00edvnej\u0161ie.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u042d\u0440\u0438\u043a \u0411\u0438\u0433\u0433\u0435\u0440\u0441 (Eric Biggers), \u043e\u0434\u0438\u043d \u0438\u0437 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0448\u0438\u0444\u0440\u0430 Adiantum \u0438 \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044f\u0434\u0440\u0430 Linux fscrypt, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0445 \u0438\u0437-\u0437\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043d\u0435 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Ice Lake. \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 ARM. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106545","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Z\u00e1vislos\u0165 doby vykon\u00e1vania in\u0161trukci\u00ed od \u00fadajov na CPU ARM a Intel | ProHoster","description":"Eric Biggers, jeden z v\u00fdvoj\u00e1rov \u0161ifrovacieho algoritmu Adiantum a udr\u017eiavate\u013e pod syst\u00e9mu jadra Linux fscrypt, navrhol s\u00fabor opr\u00e1v na blokovanie bezpe\u010dnostn\u00fdch probl\u00e9mov, ktor\u00e9 vypl\u00fdvaj\u00fa z charakteristiky procesorov.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/zavisimost-vremeni-vypolneniya-instrukczij-ot-dannyh-na-cpu-arm-i-intel","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u043e\u0442 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 CPU ARM \u0438 Intel | ProHoster","og:description":"\u042d\u0440\u0438\u043a \u0411\u0438\u0433\u0433\u0435\u0440\u0441 (Eric Biggers), \u043e\u0434\u0438\u043d \u0438\u0437 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0448\u0438\u0444\u0440\u0430 Adiantum \u0438 \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044f\u0434\u0440\u0430 Linux fscrypt, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0445 \u0438\u0437-\u0437\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/zavisimost-vremeni-vypolneniya-instrukczij-ot-dannyh-na-cpu-arm-i-intel","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-01-29T10:48:46+00:00","article:modified_time":"2023-02-07T10:09:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/106545","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=106545"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/106545\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=106545"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=106545"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=106545"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}