Patchless Apple M-Chip Vulnerability Allows Cryptography Bypass

March 27, 2024 at 04:16PM Limited options leave many vulnerable Macs susceptible to a “GoFetch” attack, which can steal keys, including quantum-resistant ones. Based on the meeting notes, it seems the flaw is limiting the options for addressing it, leaving many Macs vulnerable to a “GoFetch” attack that can steal keys, even quantum-resistant ones. This … Read more

GoFetch security exploit can’t be disabled on M1 and M2 Apple chips

March 25, 2024 at 10:36AM Researchers have delved further into the GoFetch vulnerability affecting Apple M-series and Intel Raptor Lake CPUs. Exploiting data memory-dependent prefetchers, the exploit leaks core-cached data, posing a threat for hackers. While patches are possible for M3 and Raptor Lake CPUs, the M1 and M2 chips face challenges due to the … Read more

New GoFetch attack on Apple Silicon CPUs can steal crypto keys

March 22, 2024 at 11:07AM The “GoFetch” attack targets modern Apple M-series CPUs’ constant-time cryptographic implementations, allowing it to steal secret cryptographic keys from the CPU’s cache. The attack, developed by researchers in the U.S., cannot be fixed in affected CPUs. Mitigating it with software patches would reduce cryptographic performance. Apple owners should practice safe … Read more

New ‘GoFetch’ Apple CPU Attack Exposes Crypto Keys 

March 22, 2024 at 07:54AM A team of US researchers revealed a new side-channel attack named GoFetch, targeting Apple CPUs to extract secret encryption keys. By exploiting a hardware optimization, they inferred keys through specially crafted inputs and demonstrated successful attacks on various cryptographic implementations. The findings were reported to Apple and other developers for … Read more