This serious vulnerability renders uselss the security effects of constant time programming, a side channel mitigation encryption algorithm. This means that encryption software can be tricked by applications using GoFetch into putting sensitive data into the cache so it can be stolen.

Pending any fix advice from Apple, users are recommended to use the latest versions of software, and to perform updates regularly. Also, developers of cryptographic libraries should set the DOIT bit and DIT bit to disable the DMP on some CPUs, and to use input blinding (cryptography). Users are also recommended to avoid hardware sharing to help maintain the security of cryptographic protocols.

The post Serious Apple Chip Vulnerability Discovered appeared first on Quayside Technical Services.