Bitcoin

Apple

A newly identified vulnerability in Apple’s M-series processors could have dire implications for crypto users, with the potential to compromise the private keys essential for securing digital assets. This flaw, which resides deep within the microarchitecture of these chips, was first <a href="https://arstechnica.com/security/2024/03/hackers-can-extract-secret-encryption-keys-from-apples-mac-chips/" target="_blank" rel="noopener nofollow">reported</a> by Ars Technica and detailed in a paper published by a collective of researchers from top US universities. 
<h2 id="mac-users-beware-this-is-crucial-for-crypto-owners">Mac Users Beware: This Is Crucial For Crypto Owners</h2> 
The vulnerability stems from a side channel in the chip’s data memory-dependent prefetcher (DMP), a mechanism designed to enhance computing efficiency. However, this feature inadvertently allows for the extraction of secret keys during cryptographic operations, a process that is fundamental to the <a href="https://bitcoinist.com/ledger-expose-bitcoins-private-keys-subpoena/" target="_blank" rel="noopener ">security of cryptocurrencies</a> and other digital transactions. 
“The DMP […] uses the data values in order to make predictions […] if a data value ‘looks like’ a pointer, it will be treated as an ‘address’ […] the data from this ‘address’ will be brought to the cache, leaking over cache side channels,” the researchers explained, underscoring the inadvertent risk posed by this hardware optimization. 
Dubbed “GoFetch” by its discoverers, this attack method does not require administrative access, raising alarms about the ease with which bad actors could exploit this vulnerability. 
According to the team, “We don’t care about the data value being prefetched, but the fact that the intermediate data looked like an address is visible via a cache channel and is sufficient to reveal the secret key over time.” This discovery is particularly concerning for cryptocurrency holders, as <a href="https://bitcoinist.com/what-are-private-keys-and-why-are-they-important/" target="_blank" rel="noopener ">private keys</a> are the linchpin of security for digital wallets and transactions. 
The implications of GoFetch are vast, affecting not only traditional encryption protocols but also those designed to be resistant against quantum computing attacks. This puts a wide array of cryptographic keys at risk, including RSA and Diffie-Hellman, along with post-quantum algorithms like Kyber-512 and Dilithium-2. 
The researchers reported that “The GoFetch app requires less than an hour to extract a 2048-bit RSA key and a little over two hours to extract a 2048-bit Diffie-Hellman key,” highlighting the efficiency and danger of this attack vector. 
Mitigation of this vulnerability poses a significant challenge due to its hardware-based nature. While software-based defenses can be developed, they often come at the cost of degraded performance, particularly on devices with older M-series chips. 
“For developers of cryptographic software running on M1 and M2 processors […] they will have to employ other defenses, almost all of which come with significant performance penalties,” the researchers noted, indicating a difficult road ahead for both developers and users. 
Apple has yet to make a public statement regarding the GoFetch findings, leaving the tech community and <a href="https://bitcoinist.com/macbook-crypto-users-targeted-by-malware-attack/" target="_blank" rel="noopener ">crypto users</a> eagerly awaiting a response. In the meantime, the researchers advise end users to look out for software updates that specifically address this vulnerability. 
Given the manual and slow process required to assess an implementation’s vulnerability, the crypto community is faced with a period of uncertainty and heightened risk. 
At press time, the Bitcoin price stood at $63,396, down 5.1% in the last 24 hours. 
<img loading="lazy" decoding="async" class="size-full wp-image-288934" src="https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472" alt="Bitcoin price" width="1024" height="472" srcset="https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472?w=3628 3628w, https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472?w=640 640w, https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472?w=768 768w, https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472?w=980 980w, https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472?w=1536 1536w, https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472?w=2048 2048w, https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472?w=750 750w, https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472?w=1140 1140w, https://bitcoinist.com/wp-content/uploads/2024/03/BTCUSD_2024-03-22_15-06-02.png?resize=1024%2C472?w=3000 3000w" sizes="(max-width: 1000px) 100vw, 1000px" data-recalc-dims="1">

Urgent Alert For Apple Mac Users: Your Cryptos Could Be At Risk

Table of Contents

Bitcoinist

Other articles published on Mar 22, 2024

Outflows from Bitcoin ETFs Continue! To what extent do purchases cover sales? Here are the Details

BTC Limbung di Tengah Penguatan Dolar AS, Pullback Bitcoin Diprediksi Telah Usai

DOGE spikes while whales eye HBAR, LINK alternative

BOOK OF MEME (BOME) Spikes 41%: What’s Next?

Judge greenlights class suit alleging Silvergate Bank aided FTX fraud

Bitcoin Plummets Under $64,000 Amid Record-Breaking Stock Market Rally

Join our free newsletter for daily crypto updates!