
Hertzbleed explained
6/28/2022
This post explains the Hertzbleed vulnerability, a new type of side-channel attack that exploits data-dependent CPU frequency scaling. It details how Dynamic Voltage and Frequency Scaling (DVFS) on modern x86 processors can be influenced by the data being processed, leading to variations in CPU frequency and execution time. The post explains the concepts of P-states, Thermal Design Point (TDP), and how data-dependent power consumption (due to Hamming weight and Hamming distance) can cause different P-state distributions, ultimately making program execution time data-dependent. It highlights the practical threat to cryptographic software, especially SIKE, and notes that conventional cryptography is not currently known to be targeted.
