logoalt Hacker News

ykonstanttoday at 8:28 AM1 replyview on HN

I would also like to know. Surely some people here have at least second-hand knowledge, and silence can sometimes be deafening.


Replies

porridgeraisintoday at 10:46 AM

It's not bad at all. Long story short, this feature prevented people stealing your ram stick off of your machine, super-freezing it and quickly moving it to their machine before the charge runs out and read off whatever bits are still left intact.

It prevented it by having a hardware module on the CPU's memory controller that AES encrypts the contents you are sending to DRAM, and decrypts it before reading it back to the CPUs memory structures. All with hardware keys completely invisible to software (and one that is basically impossible to manipulate physically).

And you need to be able to do it multiple times for the bits of memory that you want to snoop on, to be the bits that survive the transfer.