Faulty instructions in Alibaba’s T-Head C910 RISC-V CPUs blow away all security

August 7, 2024 at 01:08PM Computer security researchers at CISPA Helmholtz Center in Germany have discovered security flaws in T-Head Semiconductor’s RISC-V processors, notably the GhostWrite vulnerability in the TH1520 SoC. The flaw allows unauthorized access to physical memory, posing a significant risk to affected devices. The vulnerability is inherently tied to the design of … Read more

Chip Giants Finalize Specs Baking Security into Silicon

April 26, 2024 at 08:30AM A consortium of top chip makers has finalized the Caliptra 1.0 specification, integrating zero-trust security features directly into silicon. This allows for multiple layers of protection for encrypted data on chips, addressing vulnerabilities like Meltdown and Spectre. The open-source technology is being developed by companies including Google, AMD, Microsoft, and … Read more

ISAs and the Dawning Hardware Security Revolution

December 20, 2023 at 08:27PM The perpetual battle between IT security improvements and evolving attacker exploits has traditionally focused on software advancements. However, emerging hardware security technologies, particularly advanced instruction set architecture (ISA) extensions, have the potential to revolutionize IT security. Collaborative open-source efforts are driving progress in this area and will play a crucial … Read more

ISAs and the Dawning Hardware Security Revolution

December 20, 2023 at 08:19PM Evolution of IT security presents a dynamic battleground between software sophistication and hardware advancements. While software remains the primary focus, emerging hardware technologies, such as advanced instruction set architecture (ISA) extensions, promise groundbreaking contributions to IT security capabilities. Open source technologies, like Capability Hardware Enhanced RISC Instructions (CHERI), exemplify the … Read more