Re: Another security vulnerability

Stephen Fuld <sfuld@alumni.cmu.edu.invalid> schrieb:

https://arstechnica.com/security/2024/03/hackers-can-extract-secret-encryption-keys-from-apples-mac-chips/

It's Groundhog Day, all over again!

So, is there a way to fix this while maintaining the feature's
performance advantage?

From what is written in the article, nothing is currently known.

For new silicon, people could finally implement Mitch's suggestion
of not committing speculative state before the instruction retires.
(It would be interesting to see how much area and power this
would cost with the hundreds of instructions in flight with
modern micro-architectures).

For existing silicon - run crypto on efficiency cores, or just
make sure not to run untrusted code on your machine :-(