Google researchers uncover critical security flaw in all AMD Zen processors

The vulnerability stems from AMD's use of AES-CMAC as a hash function in its signature verification process, which is a critical cryptographic error. AES-CMAC is designed as a message authentication code, not a secure hash function, making it unsuitable for this purpose.Read Entire Article

Mar 10, 2025 - 18:30
 0  15
Google researchers uncover critical security flaw in all AMD Zen processors

The vulnerability stems from AMD's use of AES-CMAC as a hash function in its signature verification process, which is a critical cryptographic error. AES-CMAC is designed as a message authentication code, not a secure hash function, making it unsuitable for this purpose.

Read Entire Article