GoFetch

<h2 id="attacks">Attacks</h2>
<p>CPUs affected include the <a href="/facts/Apple_M1/vaTA4u2J">M1</a>, <a href="/facts/Apple_M2/xhYXgnsN">M2</a>, <a href="/facts/Apple_M3/VIt7M4fB">M3</a> and <a href="/facts/Apple_A14/gcJPfsnJ">A14</a> series system-on-a-chip processors.<a class="footnote-ref" id="fnref:3" href="#fn:3"><sup>3</sup></a>
</p><p>The DMP looks at <a href="/facts/Cache_(computing)/gmJYN8wm">cache memory</a> content for possible <a href="/facts/Pointer_(computer_programming)/fPoNzy9b">pointer</a> values, and prefetches the data at those locations into cache if it sees memory access patterns that suggest following those pointers would be useful.<a class="footnote-ref" id="fnref:4" href="#fn:4"><sup>4</sup></a><a class="footnote-ref" id="fnref:5" href="#fn:5"><sup>5</sup></a> The GoFetch attacks use those speculative cache fetches to undermine a number of different cryptographic algorithms by using memory access timings to exfiltrate data from those algorithms using <a href="/facts/Timing_attack/Aau4qNoh">timing attacks</a>.
</p><p>The authors of GoFetch state that they were unable to make their exploit work on the Intel <a href="/facts/Raptor_Lake/d7Hd6KbC">Raptor Lake</a> processor they tested due to its more limited DMP functionality.<a class="footnote-ref" id="fnref:6" href="#fn:6"><sup>6</sup></a>
</p>

<h2 id="external-links">External links</h2>
<ul><li><a href="https://gofetch.fail/">Official website</a> </li></ul>

<h2 id="references">References</h2>

<ol>
<li id="fn:1"><p>"Apple Silicon chip flaw can leak encryption keys, say researchers". AppleInsider. 2024-03-21. Retrieved 2024-03-22. <a href="https://appleinsider.com/articles/24/03/21/apple-silicon-vulnerability-leaks-encryption-keys-and-cant-be-patched-easily" target="_blank">https://appleinsider.com/articles/24/03/21/apple-silicon-vulnerability-leaks-encryption-keys-and-cant-be-patched-easily</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></p></li>
<li id="fn:2"><p>"GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data Memory-Dependent Prefetchers". gofetch.fail. Retrieved 2024-03-22. <a href="https://gofetch.fail/" target="_blank">https://gofetch.fail/</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></p></li>
<li id="fn:3"><p>"GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data Memory-Dependent Prefetchers". gofetch.fail. Retrieved 2024-03-22. <a href="https://gofetch.fail/" target="_blank">https://gofetch.fail/</a> <a href="#fnref:3" class="footnote-back-ref">↩</a></p></li>
<li id="fn:4"><p>"Augury: Using Data Memory-Dependent Prefetchers to Leak Data at Rest". www.prefetchers.info. 2022-05-02. Retrieved 2024-03-30. <a href="https://www.prefetchers.info/" target="_blank">https://www.prefetchers.info/</a> <a href="#fnref:4" class="footnote-back-ref">↩</a></p></li>
<li id="fn:5"><p>Vicarte, Jose Rodrigo Sanchez; Flanders, Michael; Paccagnella, Riccardo; Garrett-Grossman, Grant; Morrison, Adam; Fletcher, Christopher W.; Kohlbrenner, David (May 2022). Augury: Using Data Memory-Dependent Prefetchers to Leak Data at Rest. 2022 IEEE Symposium on Security and Privacy (SP). San Francisco, CA, USA: IEEE. pp. 1491–1505. doi:10.1109/SP46214.2022.9833570. ISBN 978-1-6654-1316-9. <a href="978-1-6654-1316-9" target="_blank">978-1-6654-1316-9</a> <a href="#fnref:5" class="footnote-back-ref">↩</a></p></li>
<li id="fn:6"><p>"GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data Memory-Dependent Prefetchers". gofetch.fail. Retrieved 2024-03-22. <a href="https://gofetch.fail/" target="_blank">https://gofetch.fail/</a> <a href="#fnref:6" class="footnote-back-ref">↩</a></p></li>
</ol>

GoFetch open-in-new

GoFetch