Apple chips contain security vulnerability

[pmbug]

A newly discovered vulnerability baked into Apple’s M-series of chips allows attackers to extract secret keys from Macs when they perform widely used cryptographic operations, academic researchers have revealed in a paper published Thursday.

The flaw—a side channel allowing end-to-end key extractions when Apple chips run implementations of widely used cryptographic protocols—can’t be patched directly because it stems from the microarchitectural design of the silicon itself. Instead, it can only be mitigated by building defenses into third-party cryptographic software that could drastically degrade M-series performance when executing cryptographic operations, particularly on the earlier M1 and M2 generations. The vulnerability can be exploited when the targeted cryptographic operation and the malicious application with normal user system privileges run on the same CPU cluster.
...

More:

Unpatchable vulnerability in Apple chip leaks secret encryption keys

Fixing newly discovered side channel will likely take a major toll on performance.

arstechnica.com

Likely affects iPad and Mac computers. I'm not sure if it affects iPhones.

 

[chieftain]

iPad Pro and Mac only, but this ain't something they weren't aware of, it's too specific to be an accident or bug.

 

[Fatrat]

Gee, I want to try Apple, I was considering a MacBook, I work from the assumption that I'm already being spied on, what's one more...