Repeat after me: glitching works. Every time. If you don't have power, reset, and clock monitoring, your chip *will* be pwned. No exceptions.https://twitter.com/bernfroe/status/959405824840957952 …
-
Well, the idea is that typically the code that needs performance isn't the security code. So if you can compartmentalize properly... Of course if both run on the same CPU that's still prone to microarchitectural nastygrams unless designed to basically reset on priv transitions.
More realistically you just put all the security into a separate CPU and harden it as much as possible.
-
-
I personally liked the PS3 thing when they hid the crypto in the SPU and then let you freely call it with anything you wanted to decrypt. Service with a smile!
-
Not just that, the Cell architecture is such that you can boot the *secure bootloader* on that SPU and virtualize all I/O from insecure code. "Here we have this ultra secure CPU, of course you're allowed to control and lie to it about the outside world!"
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.