SQUIP - ื‘ืึทืคืึทืœืŸ ืื•ื™ืฃ ืึทืžื“ ืคึผืจืึทืกืขืกืขืจื–, ืœื™ื“ื™ื ื’ ืฆื• ื“ืึทื˜ืŸ ืœื™ืงืึทื“ื–ืฉ ื“ื•ืจืš ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ื˜ืฉืึทื ืึทืœื–

ื ื’ืจื•ืคึผืข ืคื•ืŸ โ€‹โ€‹ืจื™ืกืขืจื˜ืฉืขืจื– ืคื•ืŸ ื“ื™ Graz ืื•ื ื™ื•ื•ืขืจืกื™ื˜ืขื˜ ืคื•ืŸ ื˜ืขื›ื ืึธืœืึธื’ื™ืข (ืขืกื˜ืจื™ื™ึทืš), ื‘ื™ื– ืึทื”ืขืจ ื‘ืึทื•ื•ื•ืกื˜ ืคึฟืึทืจ ื“ืขื•ื•ืขืœืึธืคึผื™ื ื’ ื“ื™ MDS, NetSpectre, Throwhammer ืื•ืŸ ZombieLoad ืื ืคืืœืŸ, ื“ื™ืกืงืœืึธื•ื–ื“ ื“ืขื˜ืึทื™ืœืก ืคื•ืŸ ืึท ื ื™ื™ึท ื–ื™ื™ึทื˜-ืงืึทื ืึทืœ ื‘ืึทืคืึทืœืŸ (CVE-2021-46778) ืื•ื™ืฃ ื“ื™ ืึทืžื“ ืคึผืจืึทืกืขืกืขืจ ืกืงืขื“ื–ืฉื•ืœืขืจ ืจื™ื™. , ื’ืขื ื™ืฆื˜ ืฆื• ืคึผืœืึทืŸ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ื™ื ืกื˜ืจืึทืงืฉืึทื ื– ืื™ืŸ ืคืึทืจืฉื™ื“ืขื ืข ื“ื•ืจื›ืคื™ืจื•ื ื’ ื•ื ื™ืฅ ืคื•ืŸ ื“ื™ ืงืคึผื•. ื“ื™ ื‘ืึทืคืึทืœืŸ, ื’ืขืจื•ืคืŸ SQUIP, ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ื“ืึทื˜ืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ ื—ืฉื‘ื•ื ื•ืช ืื™ืŸ ืืŸ ืื ื“ืขืจ ืคึผืจืึธืฆืขืก ืึธื“ืขืจ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืึทืฉื™ืŸ ืึธื“ืขืจ ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ืึท ืคืึทืจื‘ืึธืจื’ืŸ ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืงืึทื ืึทืœ ืฆื•ื•ื™ืฉืŸ ืคึผืจืึทืกืขืกืึทื– ืึธื“ืขืจ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ื™ื™ึทื˜ืŸ ื“ืึทื˜ืŸ ื‘ื™ื™ืคึผืึทืกื™ื ื’ ืกื™ืกื˜ืขื ืึทืงืกืขืก ืงืึธื ื˜ืจืึธืœ ืžืขืงืึทื ื™ื–ืึทืžื–.

ืึทืžื“ ืงืคึผื•ืก ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ 2000st, 5000nd ืื•ืŸ 3000rd ื“ื•ืจ ื–ืขืŸ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ืฉืขืจื– (AMD Ryzen XNUMX-XNUMX, AMD Ryzen Threadripper, AMD Athlon XNUMX, AMD EPYC) ื–ืขื ืขืŸ ืึทืคืขืงื˜ืึทื“ ื•ื•ืขืŸ ื ื™ืฆืŸ ืกื™ืžื•ืœื˜ืึทื ืขืึธื•ืก ืžื•ืœื˜ื™ื˜ื”ืจืขืึทื“ื™ื ื’ ื˜ืขื›ื ืึธืœืึธื’ื™ืข (SMT). ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื– ื–ืขื ืขืŸ ื ื™ืฉื˜ ืกืึทืกืขืคึผื˜ืึทื‘ืึทืœ ืฆื• ื‘ืึทืคืึทืœืŸ, ื•ื•ื™ื™ึทืœ ื–ื™ื™ ื ื•ืฆืŸ ืึท ืื™ื™ืŸ ืกืงืขื“ื–ืฉื•ืœืขืจ ืจื™ื™, ื‘ืฉืขืช ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืึทืžื“ ืคึผืจืึทืกืขืกืขืจื– ื ื•ืฆืŸ ื‘ืึทื–ื•ื ื“ืขืจ ืงื™ื•ื– ืคึฟืึทืจ ื™ืขื“ืขืจ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืึทืคึผืึทืจืึทื˜. ื•ื•ื™ ืึท ื•ื•ืึธืจืงืึทืจืึธื•ื ื“ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืึทื“ื–ืฉ, AMD ืจืขืงืึทืžืขื ื“ื™ื“ ืึทื– ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ื ื•ืฆืŸ ืึทืœื’ืขืจื™ื“ืึทืžื– ื•ื•ืึธืก ืฉื˜ืขื ื“ื™ืง ื“ื•ืจื›ืคื™ืจืŸ ืžืึทื˜ืึทืžืึทื˜ื™ืงืึทืœ ื—ืฉื‘ื•ื ื•ืช ืื™ืŸ ืงืขืกื™ื™ื“ืขืจื“ื™ืง ืฆื™ื™ื˜, ืจืึทื’ืึทืจื“ืœืึทืก ืคื•ืŸ ื“ื™ ื ืึทื˜ื•ืจ ืคื•ืŸ ื“ื™ ืคึผืจืึทืกืขืกื˜ ื“ืึทื˜ืŸ, ืื•ืŸ ืื•ื™ืš ื•ื™ืกืžื™ื™ื“ืŸ ื‘ืจืึทื ื˜ืฉื™ื ื’ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืกื•ื“ ื“ืึทื˜ืŸ.

ื“ื™ ืึทื˜ืึทืง ืื™ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืึทืŸ ืึทืกืขืกืžืึทื ื˜ ืคื•ืŸ ื“ื™ ืžื“ืจื’ื” ืคื•ืŸ ืงืึทื ื˜ืขื ืฉืึทืŸ ืคึผืึทืกื™ืจื•ื ื’ (ืงืึทื ื˜ืขื ืฉืึทืŸ ืžื“ืจื’ื”) ืื™ืŸ ืคืึทืจืฉื™ื“ืขื ืข ืกืงืขื“ื–ืฉื•ืœืขืจ ืงื™ื•ื– ืื•ืŸ ืื™ื– ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ื“ื•ืจืš ื“ื™ ืžืขื–ืฉืขืจืžืึทื ื˜ ืคื•ืŸ ื“ื™ืœื™ื™ื– ื•ื•ืขืŸ ืกื˜ืึทืจื˜ื™ื ื’ ื˜ืฉืขืง ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ืื™ืŸ ืืŸ ืื ื“ืขืจ SMT ืคืึธื“ืขื ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ื’ืฉืžื™ื•ืช ืงืคึผื•. ืฆื• ืคื•ื ืึทื ื“ืขืจืงืœื™ื™ึทื‘ืŸ ื“ืขื ืื™ื ื”ืึทืœื˜, ื“ื™ Prime + Probe ืื•ืคึฟืŸ ืื™ื– ื’ืขื ื™ืฆื˜, ื•ื•ืึธืก ื™ืžืคึผืœื™ื™ื– ืฆื• ืคึผืœืึธืžื‘ื™ืจืŸ ื“ื™ ืจื™ื™ ืžื™ื˜ ืึท ืจืขืคึฟืขืจืขื ืฅ ื’ืึทื ื’ ืคื•ืŸ ื•ื•ืึทืœื•ืขืก ืื•ืŸ ื‘ืึทืฉื˜ื™ืžืขืŸ ืขื ื“ืขืจื•ื ื’ืขืŸ ื“ื•ืจืš ืžืขืกื˜ืŸ ื“ื™ ืึทืงืกืขืก ืฆื™ื™ื˜ ืฆื• ื–ื™ื™ ื•ื•ืขืŸ ืจื™ืคื™ืœื™ื ื’.

ื‘ืขืฉืึทืก ื“ืขื ืขืงืกืคึผืขืจื™ืžืขื ื˜, ื“ื™ ืจื™ืกืขืจื˜ืฉืขืจื– ื–ืขื ืขืŸ ื‘ื™ื›ื•ืœืช ืฆื• ื’ืึธืจ ืจื™ืงืจื™ื™ื™ื˜ ื“ื™ ืคึผืจื™ื•ื•ืึทื˜ 4096-ื‘ื™ืกืœ RSA ืฉืœื™ืกืœ ื’ืขื ื™ืฆื˜ ืฆื• ืฉืึทืคึฟืŸ ื“ื™ื’ื™ื˜ืึทืœ ืกื™ื’ื ืึทื˜ืฉืขืจื– ื ื™ืฆืŸ ื“ื™ mbedTLS 3.0 ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ื‘ื™ื‘ืœื™ืึธื˜ืขืง, ื•ื•ืึธืก ื ื™ืฆื˜ ื“ื™ ืžืึธื ื˜ื’ืึธืžืขืจื™ ืึทืœื’ืขืจื™ื“ืึทื ืฆื• ื›ืึทืคึผืŸ ืึท ื ื•ืžืขืจ ืฆื• ืึท ืžืึทื›ื˜ ืžืึธื“ื•ืœืึธ. ืขืก ื”ืึธื˜ ื’ืขื“ื•ื™ืขืจื˜ 50500 ื˜ืจืึทืกืขืก ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ืขื ืฉืœื™ืกืœ. ื“ื™ ื’ืึทื ืฅ ืึทื˜ืึทืง ืฆื™ื™ื˜ ื’ืขื ื•ืžืขืŸ 38 ืžื™ื ื•ื˜. ืึทื˜ืึทืง ื•ื•ืขืจื™ืึทื ืฅ ื–ืขื ืขืŸ ื“ืขืžืึทื ืกื˜ืจื™ื™ื˜ื™ื“ ื•ื•ืึธืก ืฆื•ืฉื˜ืขืœืŸ ืึท ืจื™ื ืขืŸ ืฆื•ื•ื™ืฉืŸ ืคืึทืจืฉื™ื“ืขื ืข ืคึผืจืึทืกืขืกืึทื– ืื•ืŸ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืงืึทื ื˜ืจืึธื•ืœื“ ื“ื•ืจืš ื“ื™ KVM ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ. ืขืก ืื™ื– ืื•ื™ืš ื’ืขื•ื•ื™ื–ืŸ ืึทื– ื“ืขืจ ืื•ืคึฟืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื’ืขื”ื™ื™ื ื“ืึทื˜ืŸ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืฆื•ื•ื™ืฉืŸ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืžื™ื˜ ืึท ืงื•ืจืก ืคื•ืŸ 0.89 ืžื‘ื™ื˜ / s ืื•ืŸ ืฆื•ื•ื™ืฉืŸ ืคึผืจืึทืกืขืกืึทื– ืžื™ื˜ ืึท ืงื•ืจืก ืคื•ืŸ 2.70 ืžื‘ื™ื˜ / s ืžื™ื˜ ืึท ื˜ืขื•ืช ืงื•ืจืก ืคื•ืŸ ื•ื•ื™ื™ื ื™ืงืขืจ ื•ื•ื™ 0.8%.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’