News for hackers. Stuff that matters.
Re:Intel Microcode Decryptor by jacquesm on Tuesday July 19, 2022 @05:07AM (#32149188)
If they were truly sane this whole thing would have never existed, so all bets are off on that one.
Re:Intel Microcode Decryptor by mjg59 on Tuesday July 19, 2022 @05:44AM (#32149408)
Depending on how microcode is defined, it's arguably existed back to the 40s. Which modern and reasonably performant CPUs are you thinking of that don't have microcode?
Re:Intel Microcode Decryptor by jacquesm on Tuesday July 19, 2022 @06:09AM (#32149545)
You completely misunderstood my comment.
Re:Intel Microcode Decryptor by mjg59 on Tuesday July 19, 2022 @06:11AM (#32149562)
What were you referring to, other than microcode?

Edit: Oh, you mention the encryption. Big companies love obfuscating everything they create, because they're afraid something commercially sensitive will exist there and someone will copy it and outcompete them. I agree that this is ridiculous, but I don't think it's evidence of any sort of nefarious activity.

Re:Intel Microcode Decryptor by jacquesm on Tuesday July 19, 2022 @06:25AM (#32149648)
It's not evidence, but it may well have been used to hide such evidence.
Re:Intel Microcode Decryptor by mjg59 on Tuesday July 19, 2022 @06:33AM (#32149694)
Well yes anything that's encrypted could potentially turn out to be evidence of a crime when decrypted, but we don't usually assume that the use of encryption is indicative of that
Re:Intel Microcode Decryptor by ncmncm on Tuesday July 19, 2022 @07:31AM (#32150094)
For criminal cases. But this is not.
Re:Intel Microcode Decryptor by salawat on Wednesday July 20, 2022 @12:24PM (#32168091)
Yes, because large corporations never commit criminal infractions, or admit any wrongdoing. They just happen to settle with regulators as cost of doing business.
Re:Intel Microcode Decryptor by sroussey on Tuesday July 19, 2022 @03:52PM (#32157038)
Microcode spills lots of the secrets of the hardware design, so you want it encrypted for as many years as possible to keep your trade secrets out of competitors’ hands.
Re:Intel Microcode Decryptor by jpgvm on Tuesday July 19, 2022 @05:50AM (#32149432)
They were always going to need microcode to deal with errata or are you referring to encrypting the microcode rather than just signing it?
Re:Intel Microcode Decryptor by jacquesm on Tuesday July 19, 2022 @06:10AM (#32149552)
The latter. I can see why they did it but if it was used to hide something nefarious Intel is done.
Re:Intel Microcode Decryptor by ta988 on Tuesday July 19, 2022 @11:12PM (#32160945)
If they have to hide something, it will not be in the microcode. They always expected it to be broken one day. If it is on the die it will take a massive effort to be found and understood, if ever. And it is actually much easier to hide from the employees as if it was in the microcode, many of them could have extracted the keys and sold them to a foreign power.
Re:Intel Microcode Decryptor by masklinn on Tuesday July 19, 2022 @05:56AM (#32149469)
What whole thing? Instruction microcoding is nothing new.

Or do you mean.

- the TXE vulnerability and / or undocumented debugging mode (so microcode wouldn’t have been extracted)

- microcode encryption so the microcode would always have been completely readable

- x86

- Intel itself

?

Re:Intel Microcode Decryptor by jacquesm on Tuesday July 19, 2022 @06:12AM (#32149564)
The second, possibly combined with something dirty.

I can see why they would sign/encrypt it so that things got safer, but then they should have done a much better job of it. If it was encrypted to hide something that could not stand the light of day then that's an entirely different matter altogether.

Time will tell.

Re:Intel Microcode Decryptor by aleks224 on Tuesday July 19, 2022 @06:31AM (#32149674)
At what point in time did encrypting microcode in processors become common? Is this a relatively recent practice?
Re:Intel Microcode Decryptor by alophawen on Tuesday July 19, 2022 @06:51AM (#32149793)
IIRC, it happened when IME was introduced. Maybe 2008?

Then AMD PSP did the same starting in 2013.