The Patching Friars' AlmanacA calendar of CVE saints

June 14

HertzbleedHoly card for hertzbleed: official logo by Hertzbleed authors (CC0 1.0), frame generated with AI (Claude, Anthropic).CC BY-NC-SA 4.0; logo CC0 1.0 Hertzbleed CELERITAS PRODIT
Official logo by Hertzbleed authors (CC0 1.0) · 🤖 frame and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Hertzbleed, Who Made Frequency Sing

Patron of processors that speed up and slow down, constant-time cryptography, and patient stopwatches.

Life

On 14 June 2022 researchers from several universities revealed that the frequency of Intel and AMD processors, which rises and falls to save power, also depended on the data being processed. So even cryptographic code written to always take the same time gave itself away, and by timing it remotely a key could be extracted, as they showed against SIKE. The vendors did not release corrective microcode.

Prayer

O Saint Hertzbleed, who makes the CPU's heart beat faster when it thinks of secrets, grant our algorithms an unflappable frequency. Amen.

How to celebrate

Celebrated by updating cryptographic libraries with the countermeasures and asking your processor to stay calm.

A racing heart gives the secret away.

Technical record

Disclosed on
June 14 2022
CVE
CVE-2022-23823CVE-2022-24436CVE-2022-35888
CVSS
6.5
Product
AMD · AMD Processors

A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure.

Sources: hertzbleed.com · intel.com

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.