Epyc crypto flaw? AMD emits firmware fix for server processors after Googler smashes RAM encryption algorithms

Microchip slinger AMD has issued a firmware patch to fix the encryption in its Secure Encrypted Virtualization technology (SEV), used to defend the memory of Linux KVM virtual machines running on its Epyc processors. "Through ongoing collaboration with industry researchers AMD became aware that, if using the user-selectable …

[Paratrooping Parrot]

This is how you do it Intel

Accept the flaw and fix it. Don't go round trying to diss those who found the flaw.

[Danny Boyd]

Chinese Remainder Theorem? Hmm... Huawei again?

[Andy The Hat]

Is Chinese Remainder Theorem on the banned list yet?

Are Google banned for using Chinese technology to break USofA hardware?

I sense the stirrings of an Orange twit sorry, tweet ...

[MiguelC]

I hurt my brain after following the link on the Chinese Remainder Theorem

[Blazde]

Plausible. NSA thought they were so clever backdooring Dual_EC_DRBG but the Tang dynasty undermined them centuries earlier by backdooring the Chinese Remainder Theorem.

A recent xkcd comes to mind: Stack https://xkcd.com/2166/

[Anonymous Coward]

hmm

If you don't directly control the hardware and what software is running on it you are lying to yourself it is secure.

[Fading]

Re: hmm

Though this may still be more secure than actually controlling it yourself......

[phuzz]

Re: hmm

"If you don't directly control the hardware and what software is running on it you are lying to yourself it is secure."

And that's why I only use CPUs that I've hand whittled myself from a single crystal of silicon. Of course, adding each of the transistors requires a steady hand, but it's a small price to pay to be 'secure'.

[Anonymous Coward]

Re: hmm

If you don't directly control the hardware and what software is running on it you are lying to yourself it is secure.

You forgot the troll icon. As anybody haunting Reg for any length of time is well aware, there is no such thing as "secure". Rather, there is a whole spectrum of being more or less trouble (ie money, skill, and risk to life and limb) to breach your security. On that spectrum, guest memory encryption with cryptographically-sound key management is a very useful point. It won't stand up to a determined and resourceful state-level attacker - nothing would - but it does protect you from an electronic equivalent of a casual smash'n'grab, while still allowing you to rent somebody else's hardware.

For many uses, that's plenty secure enough.

[Anonymous Coward]

Re: hmm

As OP totally agree with this ^.

[MrKrotos]

Hosting fix on Wordpress?

So the fix is at https://developer.amd.com/wp-content/resources/amd_sev_fam17h_model0xh_0.17b22.zip

Because Wordpress is so secure...

[Anonymous Coward]

Re: Hosting fix on Wordpress?

>Because Wordpress is so secure...

I'm having my fix delivered by armoured car with lotsa of guards carrying lotsa guuuuuunns, I don't trust this internet thingy.

[Anonymous Coward]

Re: Hosting fix on Wordpress?

"I'm having my fix delivered by armoured car with lotsa of guards carrying lotsa guuuuuunns, I don't trust this internet thingy."

I require all my updates to be verified by the manufacturer, written onto RO media by trusted employees of the manufacturer that I have personally met and then delivered by FedEx to my research lab encased in a volcano. Admittedly it's a little slower than the Internet, but the warm feeling of that extra care really makes a difference to my IT minions.

What could possibly go wrong with my plans for world domination?

And why do all my deliveries appear to go from the US to Japan to China to the UK and then finally to my secret island?

[Anonymous Coward]

Re: Hosting fix on Wordpress?

"What could possibly go wrong with my plans for world domination?"

One of the "trusted" links in your chain gets doubled and now allows for the item to be surreptitiously altered in transit. Now what?