riptl

Creates a Spectre-like timing side channel on Zen5 via Return Address Stack poisoning.

A Zen5 CPU predicts the destination of ret instructions using the Return Address Stack, which can be poisoned with a sequence of call fake_target; pop rax;.

• call pushes a return address to the real stack and RAS
• pop removes the return address from the real stack, desynchronizing the RAS
• ret is speculated to go to fake_target, but goes somewhere else

It also demonstrates reduced speculation when enabling CET shadow stack,

riptl

#include <std/mem.pat>
#include <std/io.pat>

struct filehdr {
	be u16 f_magic;	/* Magic number */
	be u16 f_nscns;	/* Number of Sections */
	be u32 f_timdat;	/* Time & date stamp */
	be u64 f_symptr;	/* File pointer to Symbol Table */
	be u16 f_opthdr;	/* sizeof (Optional Header) */
	be u16 f_flags;	/* Flags */

riptl

Some notes on how to maintain the radare2 Debian package.

The Debian package source is at https://salsa.debian.org/pkg-security-team/radare2 You'll need a salsa.debian.org account to propose changes.

The following branches are of interest:

• upstream: Contains a copy of the Git repo
• debian/master: Contains a Debianized copy of the Git repo
• pristine-tar: Contains source tarballs
• pristine-lfs: Contains the latest source tarball as LFS

riptl

# npm audit report

ansi-regex  4.0.0 - 4.1.0
Severity: high
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix`
node_modules/ganache-cli/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex

elliptic  <6.5.4

riptl

riptl

add
addc
adde
addi
addic
addis
addme
addpcis
addze
and

riptl

function_0:
    exit

function_1:
    mov64 r6, r1
    call function_16705
    mov64 r1, r6
    call function_16258
    exit

riptl

riptl

BLS12-381 threshold signature scheme in Go using "trusted" key generation.

Based on cryptography libraries from https://github.com/drand

Output:

Private key:            19ff5b84b3e983e022d9f189a8832ddeb638fb7242c2d1e6c01bfe6afc6f9354
Public key:             87182d07e893944771b9eb443bb43548b060606143587f2e104a9de56a4831848b83deb4ad553cabcbec90ed0adbca91
Message:                Hello Obol
------------------------

riptl

PowerPC 750CL instruction bit patterns

The following listing describes the static bit pattern of each opcode.

patterns.txt

Syntax:

line: opcode <pattern>...
pattern: start,stop,value