Skip to content
OpenAdvisories
Unscored CVE-2021-26322 EUVD-2021-13128GHSA-q556-rcvc-qq2m

Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.

Published Nov 16, 2021 · Updated Sep 17, 2024 · Assigned by AMD

Vendor: AMD Product: 1st Gen AMD EPYC™ Product: 2nd Gen AMD EPYC™ Product: 3rd Gen AMD EPYC™

Description

Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.

Affected products

VendorProductAffectedFixed
AMD 1st Gen AMD EPYC™ unspecified – < NaplesPI-SP3_1.0.0.G NaplesPI-SP3_1.0.0.G
AMD 2nd Gen AMD EPYC™ unspecified – < RomePI-SP3_1.0.0.C RomePI-SP3_1.0.0.C
AMD 3rd Gen AMD EPYC™ unspecified – < MilanPI-SP3_1.0.0.4 MilanPI-SP3_1.0.0.4

References