{"id":17982,"date":"2018-11-05T02:19:54","date_gmt":"2018-11-05T02:19:54","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/"},"modified":"2018-11-05T02:19:54","modified_gmt":"2018-11-05T02:19:54","slug":"portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/","title":{"rendered":"PortSmash attack blasts hole in Intel&#8217;s Hyper-Threading CPUs, leaves with secret crypto keys"},"content":{"rendered":"<p>Brainiacs in Cuba and Finland have found a new side-channel vulnerability in Intel x64 processors that could allow an attacker to sniff out cryptographic keys and other privileged information.<\/p>\n<p>Following disclosure of the flaw to Intel at the beginning of October, boffins at the Tampere University of Technology in Finland and Technical University of Havana, Cuba, today published proof-of-concept they&#8217;re calling <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/github.com\/bbbrumley\/portsmash\">PortSmash<\/a>.<\/p>\n<p>The research team used the PoC to steal an OpenSSL (version 1.1.0h or less) P-384 private key from a TLS server. (Subsequent versions of OpenSSL aren&#8217;t susceptible.)<\/p>\n<p>To pull off this secret surveillance, the exploit code must run on the system under attack, specifically on the same CPU core as the process you want to pry into. That means it can&#8217;t be used to eavesdrop on software remotely, or easily on the same host, but it could be useful for determined miscreants and snoops who have managed to infiltrate someone else&#8217;s computer. You basically have to already be able to run your own evil code on a machine in order to PortSmash it.<\/p>\n<p>In <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/seclists.org\/oss-sec\/2018\/q4\/123\">a post<\/a> to a security mailing list, Bill Brumley, assistant professor in the department of pervasive computing at Tampere, said the information leakage was made possible thanks to Intel&#8217;s implementation of simultaneous multi-threading, known as <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2002\/06\/18\/what_the_hell_is_hyperthreading\/\">Hyper-Threading<\/a>.<\/p>\n<p>SMT works by allowing, typically, two separate running programs to share the same CPU core at more or less the same time: two threads in one or more processes can run alongside each other in a single processor core. If you have four cores, and two of these SMT hardware threads per core, that&#8217;s effectively eight cores per processor as far as application software is concerned, which means more stuff can be executed per second. SMT therefore boosts performance in some cases, and in others, it can reduce performance, depending on the workload type.<\/p>\n<p>The downside is that it is possible for code in one hardware thread to look over the shoulder of code in the other hardware thread on the same core, and work out what its partner is doing. It can do this by studying patterns of access to caches, or timing how long it takes to complete an operation. This is why developers of cryptographic software, especially, are encouraged to build in defenses to thwart side-channel eavesdropping.<\/p>\n<p>&#8220;We detect port contention to construct a timing side channel to exfiltrate information from processes running in parallel on the same physical core,&#8221; as Brumley put it.<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2018\/06\/21\/shutterstock_generic_heart_bleed.jpg?x=174&amp;y=115&amp;crop=1\" width=\"174\" height=\"115\" alt=\"No, this isn't the official TLBleed logo (unless you want it to be)\"\/><\/p>\n<h2 title=\"How to extract 256-bit keys with 99.8% success\">Meet TLBleed: A crypto-key-leaking CPU attack that Intel reckons we shouldn&#8217;t worry about<\/h2>\n<p><a href=\"https:\/\/www.theregister.co.uk\/2018\/06\/22\/intel_tlbleed_key_data_leak\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>Thus, the attack works by running the PortSmash process alongside a selected victim process, on the same CPU core, with each process using one of the core&#8217;s two SMT hardware threads. The PortSmash code then measures timing discrepancies to snoop on the operations performed by the other process, and gradually discern its protected data.<\/p>\n<p>That means if the spied-upon process is performing some kind of cryptography, it is possible for the PortSmash process sharing the same CPU core to extract secret information, such as an decryption key, from its victim program<\/p>\n<p>The fix, Brumley suggests, is to disable SMT\/Hyper-Threading in the processor chip&#8217;s BIOS. OpenBSD already <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2018\/06\/20\/openbsd_disables_intels_hyperthreading\/\">disables<\/a> Intel&#8217;s Hyper-Threading for security reasons.<\/p>\n<p>The PoC, Brumley says, works out of the box for Intel&#8217;s Skylake and Kaby Lake, though it hasn&#8217;t been tested on other Intel chips. He suggests it may work for other SMT architectures \u2013 such as AMD&#8217;s Zen CPU family \u2013 if modifications are made to the code.<\/p>\n<p>A CVE has been proposed, CVE-2018-5407, however, Intel doesn&#8217;t appear to think it&#8217;s worthy of a patch. For one thing, it has nothing to do with this year&#8217;s speculative execution flaws: Spectre, Meltdown, and the like.<\/p>\n<p>In a statement emailed to <em>The Register<\/em>, an Intel spokesperson suggested any risk can be mitigated through existing software protections, such as writing code that is resistant to SMT side-channel attacks. Chipzilla is, essentially, taking a line suggested in the mailing list discussion of the flaw that this isn&#8217;t so much a vulnerability as &#8220;<a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/seclists.org\/oss-sec\/2018\/q4\/126\">a fully expected by-design property<\/a>&#8221; arising from SMT.<\/p>\n<p>&#8220;Intel received notice of the research,&#8221; the chipmaker&#8217;s spokesperson said. &#8220;This issue is not reliant on speculative execution, and is therefore unrelated to Spectre, Meltdown or L1 Terminal Fault. We expect that it is not unique to Intel platforms. Research on side-channel analysis methods often focuses on manipulating and measuring the characteristics, such as timing, of shared hardware resources. Software or software libraries can be protected against such issues by employing side-channel safe development practices.&#8221;<\/p>\n<p>Intel&#8217;s spokesperson repeated its assertion that the company takes protecting customer data seriously and considers it a top priority.<\/p>\n<p>A spokesperson for AMD told us they&#8217;re looking into it: &#8220;At AMD, security is a top priority and we are continually working to ensure the safety of our users as new risks arise. We are investigating the PortSmash side-channel vulnerability report, which we just received, to understand any potential AMD product susceptibility.&#8221; \u00ae<\/p>\n<p class=\"wptl btm\"><span>Sponsored:<\/span> <a href=\"https:\/\/go.theregister.co.uk\/tl\/1787\/-6625\/following-bottomlines-journey-to-the-hybrid-cloud?td=wptl1787\">Following Bottomline\u2019s journey to the Hybrid Cloud<\/a><\/p>\n<p>READ MORE <a href=\"http:\/\/go.theregister.com\/feed\/www.theregister.co.uk\/2018\/11\/02\/portsmash_intel_security_attack\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Malware already on machines can exploit SMT using side-channel techniques to snatch private info Brainiacs in Cuba and Finland have found a new side-channel vulnerability in Intel x64 processors that could allow an attacker to sniff out cryptographic keys and other privileged information.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":17983,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-17982","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>PortSmash attack blasts hole in Intel&#039;s Hyper-Threading CPUs, leaves with secret crypto keys 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PortSmash attack blasts hole in Intel&#039;s Hyper-Threading CPUs, leaves with secret crypto keys 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-11-05T02:19:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"PortSmash attack blasts hole in Intel&#8217;s Hyper-Threading CPUs, leaves with secret crypto keys\",\"datePublished\":\"2018-11-05T02:19:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/\"},\"wordCount\":874,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/\",\"name\":\"PortSmash attack blasts hole in Intel's Hyper-Threading CPUs, leaves with secret crypto keys 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg\",\"datePublished\":\"2018-11-05T02:19:54+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PortSmash attack blasts hole in Intel&#8217;s Hyper-Threading CPUs, leaves with secret crypto keys\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PortSmash attack blasts hole in Intel's Hyper-Threading CPUs, leaves with secret crypto keys 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/","og_locale":"en_US","og_type":"article","og_title":"PortSmash attack blasts hole in Intel's Hyper-Threading CPUs, leaves with secret crypto keys 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-11-05T02:19:54+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"PortSmash attack blasts hole in Intel&#8217;s Hyper-Threading CPUs, leaves with secret crypto keys","datePublished":"2018-11-05T02:19:54+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/"},"wordCount":874,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/","url":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/","name":"PortSmash attack blasts hole in Intel's Hyper-Threading CPUs, leaves with secret crypto keys 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg","datePublished":"2018-11-05T02:19:54+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/portsmash-attack-blasts-hole-in-intels-hyper-threading-cpus-leaves-with-secret-crypto-keys\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"PortSmash attack blasts hole in Intel&#8217;s Hyper-Threading CPUs, leaves with secret crypto keys"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/17982","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=17982"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/17982\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/17983"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=17982"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=17982"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=17982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}