AMD likes to crow about how its Epyc server processors can encrypt the content of virtal machines while they\u2019re in operation so they are secure and isolated, preventing other VMs on the processor from accessing the encrypted contents.\nWell, researchers from the Technical University of Berlin have found a weakness in that feature, known as Secure Encrypted Virtualization (SEV), and published a theoretical attack that defeats the protection.\nThe paper \u201dOne Glitch to Rule Them All: Fault Injection Attacks Against AMD\u2019s Secure Encrypted Virtualization\u201d details how the researchers succeeded in mounting a voltage fault-injection attack.\nBasically it\u2019s a shock to the Epyc\u2019s system. Integrated circuits need to operate within specific temperature, clock stability, and perhaps most important, voltage ranges. Purposefully manipulating one of these parameters is called a glitching attack because it throws the integrated circuit out of stable operating parameters.\nThe German researchers used a voltage-glitching attack to show that manipulating the input voltage to AMD chips, they can induce an error in the ROM bootloader of the secure processor, allowing them to gain full control of the processor and its contents.\n\u201cBy manipulating the input voltage to AMD systems on a chip (SoCs), we induce an error in the read-only memory (ROM) bootloader of the AMD-SP, allowing us to gain full control over this root-of-trust,\u201d the researchers say in their paper.\n\u201cFurthermore, we showed that the glitching attack enables the extraction of endorsement keys. The endorsement keys play a central role in the remote attestation mechanism of SEV and can be used to mount remote attacks. Even an attacker without physical access to the target host can use extracted endorsement keys to attack SEV-protected VMs. By faking attestation reports, an attacker can pose as a valid target for VM migration to gain access to a VM\u2019s data,\u201d the researchers wrote .\nThe hardware needed to conduct such an attack is widely available and inexpensive\u2014a microcontroller and a cheap flash programmer. And this impacts all three generations of AMD's Zen architecture.\nAnd now for the good news. The researchers said it took them four hours to prepare a system for an attack, and the attack includes an in-person stage at the server to connect the hardware. That was something AMD pointed out to me, and a fact that was buried in some of the news coverage of this.\nBottom line: don\u2019t sweat it.