[coreboot] Re: AMDFlaws

2019-02-20 Thread Matt B
> > Early 16h systems (Jaguar) are safe because they don't have a > PSP Safe yes, but not helpful in coming to grips with the PSP. > > On Sun, Feb 17, 2019 at 12:18 AM Matt B > wrote: > > > > As for the patching, afaik AMD has released patches for all of these, > but I haven't seen any patches

[coreboot] Re: AMDFlaws

2019-02-17 Thread Kyösti Mälkki
On Sun, Feb 17, 2019 at 8:47 AM Mike Banon wrote: > Hi, Almost all the coreboot-supported AMD 16h boards are AMD _early_ 16h > (so no PSP). Please tell what 16h systems do you have, maybe they > don't have a PSP at all? > > Well pcengines/apu2 variants are fam16h model30h with PSP. I have done

[coreboot] Re: AMDFlaws

2019-02-16 Thread Mike Banon
Hi, On Sun, Feb 17, 2019 at 12:18 AM Matt B wrote: > > It's somewhat unclear form the slides, but it looks like these target the 17h > (ryzen) psp. Do the same exploits also affect earlier versions? > I think these attacks are possible because of the general flaws at PSP architecture, so yes th

[coreboot] Re: AMDFlaws

2019-02-16 Thread Matt B
This fairly interesting stuff. With the fairly wide range of attacks (arbitrary code execution and faking signatures for modules) maybe some sort of runtime "psp-cleaner" might be possible, but it would probably be a crushingly difficult undertaking. It's somewhat unclear form the slides, but it l

[coreboot] Re: AMDFlaws

2019-02-09 Thread Ivan Ivanov
Hi Shawn, thank you for the message! Luckily almost all the coreboot-supported AMD boards don't contain the PSP inside their CPUs - maybe because PSP got added to AMD much later than ME got added to Intel. Only a few AMD boards, starting with "late 16h" architecture (early 16h is fine) have the PSP