New article on Intel's 3DXP

Article: Intel’s Plans for 3DXP DIMMs Emerge
By: Howard Chu (hyc.delete@this.symas.com), December 2, 2018 4:53 am
Room: Moderated Discussions
Adrian` (a.delete@this.acm.org) on December 1, 2018 2:43 pm wrote:
> Howard Chu (hyc.delete@this.symas.com) on December 1, 2018 12:52 pm wrote:
> >
> > What security threats are you thinking of? I believe with non-volatility and
> > non-destructive reads, MRAM is immune to rowhammer-style attacks. (But I don't
> > have any references that claim to have tested or verified this.)
> >
>
>
>
>
> Any kind of non-volatile RAM replacement cannot have acceptable security unless the processor
> has memory encryption, like AMD Zen has now and some future Intel processors will also have.
>
>
> Nevertheless, unlike for a SSD, where I can choose whatever encryption algorithm
> and key management system I want, I do not have any control over AMD SME.

That's somewhat the point though; if you had access to the keys at user or OS
level, then it would be directly vulnerable to arbitrary code exploits. Since
the key management is isolated from you, it's much harder to subvert it.

Current SME uses AES-128.

Certainly the AMD SP is a weak link in the chain here, and making that open
source would go a long way toward allaying suspicions.

> Maybe the AMD implementation of memory encryption is secure (although there have already been reports of
> some problems), but I cannot verify that, so I would never trust it. I trust Intel even less than AMD.

I haven't been able to find any reports of issues with SME. There's some
interesting work to bypass SEV though, hacking a hypervisor to allow pages
of an encrypted VM's memory to be returned in plaintext.

https://securityaffairs.co/wordpress/72929/hacking/amd-secure-encrypted-virtualization-hack.html

> I might accept to use non-volatile DIMMs in some server that I believe to be reasonably physically secure,
> but I will certainly never accept non-volatile RAM in a laptop, which can be easily stolen.

A lot of people travel with their laptop in Suspend-to-RAM state, so there's
really no difference there. Don't take your hands off your laptop when traveling.

These days smartphones have as much RAM as laptops. People don't routinely
walk around with their phones powered off, and phones are much more easily
stolen than laptops. Seems like an unreasonable concern, or a risk that most
people accept.

> However, having grown up in a country where everybody was under surveillance from the secret police, whose
> only purpose was to ensure that nobody will be able to overthrow the government composed of thieves and
> murderers, I am very aware of the fact that while my servers might be protected from ordinary thieves,
> they cannot be protected from the government, which I do not trust at all even today, so I will never
> use non-volatile DIMMs even in servers, regardless of what speed advantages they might have.

I would instead avoid putting data onto my servers that I would care about
having stolen.
< Previous Post in ThreadNext Post in Thread >
TopicPosted ByDate
New article on Intel's 3DXPDavid Kanter2018/07/23 09:02 AM
  New article on Intel's 3DXPGroo2018/07/23 12:53 PM
    New article on Intel's 3DXPMichael S2018/07/23 01:47 PM
  New article on Intel's 3DXPTeemo2018/07/23 04:38 PM
    New article on Intel's 3DXPWes Felterw2018/07/23 08:41 PM
    Flash DIMMs = bad ideaDavid Kanter2018/07/24 03:31 AM
      Flash DIMMs = bad ideaEmil Briggs2018/07/24 05:30 AM
        Flash DIMMs = bad ideaDavid Kanter2018/07/24 05:49 AM
          Flash DIMMs = bad ideaMichael S2018/07/24 05:59 AM
          Flash DIMMs = bad ideaEmil Briggs2018/07/24 07:29 AM
          Flash DIMMs = bad ideaDoug S2018/07/24 07:49 AM
            price Michael S2018/07/24 02:16 PM
              price Doug S2018/07/24 02:32 PM
                price Michael S2018/07/24 02:49 PM
            Flash DIMMs = bad ideablaine2018/12/03 03:40 PM
              Flash DIMMs = bad ideaWes Felter2018/12/04 11:07 AM
                Flash DIMMs = bad ideaRichardC2018/12/04 03:09 PM
        Flash DIMMs = bad ideaMichael S2018/07/24 05:51 AM
        Flash DIMMs = bad ideaAdrian2018/07/24 06:35 AM
          Flash DIMMs = bad ideaRicardo B2018/07/24 08:24 AM
        Flash DIMMs = bad ideabakaneko2018/07/24 05:55 PM
  New article on Intel's 3DXPEtienne2018/07/25 04:02 AM
  New article on Intel's 3DXPHoward Chu2018/12/01 05:23 AM
    New article on Intel's 3DXPMichael S2018/12/01 07:56 AM
      New article on Intel's 3DXPanon2018/12/01 08:21 AM
        New article on Intel's 3DXPHoward Chu2018/12/01 12:52 PM
          New article on Intel's 3DXPAdrian`2018/12/01 02:43 PM
            New article on Intel's 3DXPAdrian2018/12/01 10:05 PM
              New article on Intel's 3DXPHoward Chu2018/12/11 04:17 AM
                New article on Intel's 3DXPAdrian2018/12/11 04:42 AM
                New article on Intel's 3DXPMaynard Handley2018/12/11 07:20 AM
                  New article on Intel's 3DXPwumpus2018/12/11 08:36 AM
                  New article on Intel's 3DXPAnon2018/12/11 04:21 PM
                    New article on Intel's 3DXPMaynard Handley2018/12/11 04:32 PM
                      New article on Intel's 3DXPAnon2018/12/11 11:29 PM
                        New article on Intel's 3DXPMaynard Handley2018/12/12 10:32 AM
                          New article on Intel's 3DXPwumpus2018/12/12 11:07 AM
                            New article on Intel's 3DXPMaynard Handley2018/12/12 11:41 AM
                              New article on Intel's 3DXPAnon2018/12/12 02:55 PM
                          New article on Intel's 3DXPAnon2018/12/12 02:49 PM
                      New article on Intel's 3DXPAnne O. Nymous2018/12/12 12:14 AM
                        New article on Intel's 3DXPanon2018/12/12 05:28 AM
                        New article on Intel's 3DXPMaynard Handley2018/12/12 10:26 AM
                          New article on Intel's 3DXPAnne O. Nymous2018/12/12 01:10 PM
                      New article on Intel's 3DXPinnocent bystander2018/12/12 09:34 PM
                New article on Intel's 3DXPanon2018/12/12 01:42 PM
            New article on Intel's 3DXPHoward Chu2018/12/02 04:53 AM
              New article on Intel's 3DXPAdrian2018/12/02 06:01 AM
                New article on Intel's 3DXPHoward Chu2018/12/02 10:34 AM
                  Intel's 3DXP availabilityEtienne Lorrain2018/12/03 03:50 PM
Reply to this Topic
Name:
Email:
Topic:
Body: No Text
How do you spell green?