new apple M series chip vulnerability

[HomerJ]

Apple M-series CPU vulnerability enables attackers to purloin cryptographic keys from Macs

GoFetch cache side-channel attack potentially exposes Apple M-series CPUs to key extractions

www.computing.co.uk

Unpatchable vulnerability in Apple chip leaks secret encryption keys

Fixing newly discovered side channel will likely take a major toll on performance.

arstechnica.com

Unpatchable Vulnerability in Apple Chip Leaks Secret Encryption Keys - Slashdot

A newly discovered vulnerability baked into Apple's M-series of chips allows attackers to extract secret keys from Macs when they perform widely used cryptographic operations, academic researchers have revealed in a paper published Thursday. From a report: The flaw -- a side channel allowing...

apple.slashdot.org

New chip flaw hits Apple Silicon and steals cryptographic keys from system cache — 'GoFetch' vulnerability attacks Apple M1, M2, M3 processors, can't be fixed in hardware

This vulnerability is stupendously serious, affecting most encryption algorithms including those hardened against quantum computers.

www.tomshardware.com

 

[TonyCarter]

Same vulnerability on the new Intel Raptor Lake chips too...although more difficult to exploit.

On the M3 & Raptor Lake it can be mitigated by disabling the DMP - although I don't know what performance impact that has - but you are not able to do so on M1/M2 or A14 chips.

Was originally reported as 'Augury' in 2022, so I wonder if that's why the M3 has the ability to have the DMP disabled?

Must be a ploy to get everyone to upgrade to a new M3 Mac or an AMD CPU

Doesn't look like AMD use the same DMP, but I wonder whether they use something similar that hasn't been disclosed...yet!