News for hackers. Stuff that matters.
Re:Confidential VMs by CodesInChaos on Tuesday July 14, 2020 @10:03AM (#23832067)
The XTS/XEX modes would be a proper way to implement this. They use the same concept of xoring an address based tweak into the message.

Two subtle but important features of these modes are:

1. the tweak is xored both before and after the permutation

2. the tweak is derived from a secret and the address in a secure way

(I don't know if AMD chose such a secure mode, or used some insecure homebrew tweaking scheme)

There are no comments on this comment yet.