4 July 2022 by Phillip JohnstonIf there’s one lesson we’ve learned over the years of writing our monthly industry update newsletter, it’s that security is difficult. A corollary to that lesson is security is especially difficult in the age of speculative execution. ARMv8.3-A introduced a hardware-level security feature called “pointer authentication codes” (PAC), which guard against unexpected changes to pointers (e.g., function pointers, return addresses, buffers) in memory. This security measure is intended to make attacks based on memory corruption more difficult to exploit. A CPU instruction is used to add a cryptographic signature to the unused padding bits of …
Continue reading “PACMAN Vulnerability”
