Re:AMD: Microcode Signature Verification Vulnerability
by wahern on Monday February 03, 2025 @03:12PM
(#42922335)
For organizations like the NSA, a simple hack like this is the opposite of ham-fisted, though presumably they'd try to ensure the output would pass common statistical tests. The utility in quietly breaking cryptographic protocols is presumably a major reason why it was chosen for the proof-of-concept.
[ Parent
| on HN ]
Re:AMD: Microcode Signature Verification Vulnerability
by rincebrain on Monday February 03, 2025 @03:16PM
(#42922414)
Sure, but that was my point, was that just overriding rdrand would be much more ham-fisted than any practical attack I would expect someone to weaponize this into outside of a PoC.