{"id":42830,"date":"2018-12-28T19:21:11","date_gmt":"2018-12-28T18:21:11","guid":{"rendered":"https:\/\/www.planet3dnow.de\/cms\/?p=42830"},"modified":"2018-12-31T17:55:11","modified_gmt":"2018-12-31T16:55:11","slug":"35c3-inside-the-amd-microcode-rom","status":"publish","type":"post","link":"https:\/\/www.planet3dnow.de\/cms\/42830-35c3-inside-the-amd-microcode-rom\/","title":{"rendered":"<span class=\"caps\">35C3<\/span> \u2014 Inside the <span class=\"caps\">AMD<\/span> Microcode <span class=\"caps\">ROM<\/span>"},"content":{"rendered":"<p>Auf dem 35. Cha\u00ados Com\u00admu\u00adni\u00adca\u00adti\u00adon Con\u00adgress, der vom 27. bis zum 30. Dezem\u00adber 2018 in Leip\u00adzig statt\u00adfin\u00addet, haben&nbsp;Ben\u00adja\u00admin Kol\u00adlen\u00adda und&nbsp;Phil\u00adipp Kop\u00adpe einen Vor\u00adtrag zum The\u00adma \u201cInsi\u00adde the <span class=\"caps\">AMD<\/span> Micro\u00adcode <span class=\"caps\">ROM<\/span> \u2014 (Ab)Using <span class=\"caps\">AMD<\/span> Micro\u00adcode for fun and secu\u00adri\u00adty\u201d gehalten.<\/p>\n<p>Ihnen ist es gelun\u00adgen, per Rever\u00adse Engi\u00adnee\u00adring Tei\u00adle der Seman\u00adtik des Micro\u00adcodes \u00e4lte\u00adrer AMD-CPUs (bis zum <span class=\"caps\">K10<\/span>) zu ent\u00adschl\u00fcs\u00adseln und Pro\u00adgram\u00adme zu schrei\u00adben, um eige\u00adnen Micro\u00adcode in eine <span class=\"caps\">CPU<\/span> zu \u00fcbertragen.<\/p>\n<p>&nbsp;<\/p>\n<blockquote><p>Micro\u00adcode runs in most modern CPUs and trans\u00adla\u00adtes the outer ins\u00adtruc\u00adtion set (e.g. x86) into a simp\u00adler form (usual\u00adly a <span class=\"caps\">RISC<\/span> archi\u00adtec\u00adtu\u00adre). It is updata\u00adble to fix bugs in the sili\u00adcon (see Meltdown\/Spectre), but the\u00adse updates are encrypt\u00aded and signed, so no one knows how micro\u00adcode works on con\u00adven\u00adtio\u00adnal CPUs. We suc\u00adcessful\u00adly rever\u00adse engi\u00adnee\u00adred part of the micro\u00adde seman\u00adti\u00adcs of <span class=\"caps\">AMD<\/span> CPUs and are able to wri\u00adte our own pro\u00adgrams. We also reco\u00adver\u00aded the map\u00adping bet\u00adween the phy\u00adsi\u00adcal rea\u00addout (elec\u00adtron micro\u00adscope) and the \u201cvir\u00adtu\u00adal\u201d addres\u00adses used by micro\u00adcode its\u00adelf. In this talk we pre\u00adsent back\u00adground on micro\u00adcode, our fin\u00addings, our open source frame\u00adwork to wri\u00adte cus\u00adtom micro\u00adcode and our cus\u00adtom defen\u00adsi\u00adve mea\u00adsu\u00adres imple\u00admen\u00adted in microcode.<\/p><\/blockquote>\n<p>Der auf Eng\u00adlisch gehal\u00adte\u00adne Vor\u00adtrag kann auf der Sei\u00adte des CCCs auch mit einer deut\u00adschen \u00dcber\u00adset\u00adzung ange\u00adschaut werden.&nbsp;<\/p>\n<p style=\"text-align: center;\"><iframe loading=\"lazy\" src=\"https:\/\/media.ccc.de\/v\/35c3-9614-inside_the_amd_microcode_rom\/oembed\" width=\"1024\" height=\"576\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p><strong>Down\u00adload:<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/media.ccc.de\/v\/35c3-9614-inside_the_amd_microcode_rom\" target=\"_blank\" rel=\"noopener\">Vide\u00ados des Vor\u00adtrags in ver\u00adschie\u00adde\u00adnen For\u00adma\u00adten und die Slides<\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Auf dem 35. Cha\u00ados Com\u00admu\u00adni\u00adca\u00adti\u00adon Con\u00adgress, der vom 27. bis zum 30. Dezem\u00adber 2018 in Leip\u00adzig statt\u00adfin\u00addet, haben&nbsp;Ben\u00adja\u00admin Kol\u00adlen\u00adda und&nbsp;Phil\u00adipp Kop\u00adpe einen Vor\u00adtrag zum The\u00adma \u201cInsi\u00adde the <span class=\"caps\">AMD<\/span> Micro\u00adcode <span class=\"caps\">ROM<\/span> \u2014 (Ab)Using <span class=\"caps\">AMD<\/span> Micro\u00adcode for fun and secu\u00adri\u00adty\u201d gehal\u00adten. Ihnen ist es gelun\u00adgen, per Rever\u00adse Engi\u00adnee\u00adring Tei\u00adle der Seman\u00adtik des Micro\u00adcodes \u00e4lte\u00adrer AMD-CPUs (bis zum <span class=\"caps\">K10<\/span>) zu ent\u00adschl\u00fcs\u00adseln und Pro\u00adgram\u00adme zu schrei\u00adben, um eige\u00adnen Micro\u00adcode in eine <span class=\"caps\">CPU<\/span> zu \u00fcber\u00adtra\u00adgen. (\u2026) <a class=\"moretag\" href=\"https:\/\/www.planet3dnow.de\/cms\/42830-35c3-inside-the-amd-microcode-rom\/\">Wei\u00adter\u00adle\u00adsen&nbsp;\u00bb<\/a><\/p>\n","protected":false},"author":593,"featured_media":42832,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"ngg_post_thumbnail":0,"footnotes":""},"categories":[12,11],"tags":[1689,774,1457],"class_list":["post-42830","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aktuelles","category-news","tag-35c3","tag-ccc","tag-microcode","entry"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts\/42830","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/users\/593"}],"replies":[{"embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/comments?post=42830"}],"version-history":[{"count":5,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts\/42830\/revisions"}],"predecessor-version":[{"id":42880,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts\/42830\/revisions\/42880"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/media\/42832"}],"wp:attachment":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/media?parent=42830"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/categories?post=42830"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/tags?post=42830"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}