The Patching Friars' AlmanacA calendar of CVE saints

April 27

PathfinderHoly card for pathfinder, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Pathfinder SEMITA PRODITA
🤖 Image and text generated with AI

⬇ Download holy card: ·

⚔ Commemorated today: The Siege of Tallinn (2007)

Embed on your site

Blessed Pathfinder, Reader of Roads Taken

Patron of branch predictors, JPEG images decoded in secret, and processors that remember every fork in the road.

Life

At ASPLOS 2024 a team of researchers led by UC San Diego presented Pathfinder, an attack on the conditional branch predictor of modern processors. By reading and manipulating the path history the CPU keeps to guess the future, one could reconstruct which road another program had taken, and from that infer secret data: in the demonstrations, AES keys and even images being decoded. Intel and AMD published their own advisories.

Prayer

O Blessed Pathfinder, who follows the processor's footsteps at every fork, let our secret programs walk without leaving tracks. Amen.

How to celebrate

Celebrated by writing constant-time cryptographic code, which always takes the same road whatever the secret.

Tell me the road you take and I'll tell you what you hide.

Technical record

Disclosed on
April 27 2024
CVE
No CVE: blessed, not yet canonized by MITRE

Sources: dl.acm.org · dl.acm.org

Commemorated today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.