Hertzbleed: The security vulnerability that affects all modern Intel and AMD CPUs

A new security vulnerability discovered by researchers from University of Texas, University of Illinois Urbana-Champaign and the University of Washington in the US, lets attackers steal cryptographic keys from all modern Intel and AMD CPUs.

Called Hertzbleed, the vulnerability has been observed in the dynamic voltage and frequency scaling modules on the chip, which are used to regulate clock speeds and conserve power to reduce heat produced by the chip.

Using the Hertzbleed attack, the attacker can observe the power signature of any cryptographic key. Normally, the power signature of keys tend to be dynamic as the CPU adjusts clock frequencies according to the workload.

However, Hertzbleed allows the attacker to convert that power signature into timing data, which allows them to locate and steal crypto keys. This vulnerability affects all Intel processors, and AMD's Zen 2 and Zen 3 processors. What's worse is that the attack can be done remotely, requiring no physical access of the CPUs.