The vulnerability stems from AMD's use of AES-CMAC as a hash function in its signature verification process, which is a critical cryptographic error. AES-CMAC is designed as...
  • The Bard in GreenA
    8·
    2 years ago

    The researchers discovered that AMD had been using a publicly available example key from NIST documentation since Zen 1,

    lol… sigh…

    • floofloof@lemmy.caOP
      2·
      2 years ago

      Just like all the BIOSes that have turned out to be using keys called things like TEST ONLY - NOT FOR PRODUCTION, rendering Secure Boot not. I have a couple of computers like this.