Zen and the Art of Microcode Hacking - Why to not use CMAC as a hash

bughunters.google.com

Zen and the Art of Microcode Hacking - Why to not use CMAC as a hash

bughunters.google.com

Natanael to Cryptography @ Infosec.pubEnglish · 11 months ago

Blog: Zen and the Art of Microcode Hacking

bughunters.google.com

This blog post covers the full details of EntrySign, the AMD Zen microcode signature validation vulnerability recently discovered by the Google Security team.

You must log in or # to comment.

Chat

Cryptography @ Infosec.pub

crypto

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !crypto@infosec.pub

Questions, answers, discussions, and literature on the theory and practice of cryptography

Rules (longer version here)

Stick to cryptography / infosec
Be a good netizen - be kind, act in good faith, maintain high quality, don’t mislead
Link directly to original sources
Don’t use us to cheat on challenges or tests!
Crypto review requests must show the algorithm
CTF / challenges and puzzles must use modern crypto
Avoid making duplicate posts
All use of AI / LLM and their prompts MUST be disclosed in your submissions and comments

##Related resources;

Reddit cryptography forums 1 & 2; /r/crypto /r/cryptography
Cryptology ePrint archive
Discussion site for ePrint papers
Libera Chat’s IRC:s #crypto - (IRC protocol URL)
Metzdowd cryptography mailing list
Randombit cryptography mailing list
StackExchange cryptography community

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

3 users / day
5 users / week
15 users / month
78 users / 6 months
159 local subscribers
588 subscribers
91 Posts
63 Comments
Modlog