METHOD AND APPARATUS FOR A NON-DETERMINISTIC RANDOM BIT GENERATOR (NRBG)
    2.
    发明申请
    METHOD AND APPARATUS FOR A NON-DETERMINISTIC RANDOM BIT GENERATOR (NRBG) 有权
    非确定性随机位发生器(NRBG)的方法和装置

    公开(公告)号:US20150055778A1

    公开(公告)日:2015-02-26

    申请号:US13976175

    申请日:2011-12-29

    IPC分类号: H04L9/08 G06F7/58

    摘要: A hardware-based digital random number generator is provided. In one embodiment, a processor includes a digital random number generator (DRNG) to condition entropy data provided by an entropy source, to generate a plurality of deterministic random bit (DRB) strings, and to generate a plurality of nondeterministic random bit (NRB) strings, and an execution unit coupled to the DRNG, in response to a first instruction to read a seed value, to retrieve one of the NRB strings from the DRNG and to store the NRB string in a destination register specified by the first instruction.

    摘要翻译: 提供了一种基于硬件的数字随机数发生器。 在一个实施例中,处理器包括数字随机数发生器(DRNG),用于对熵源提供的熵数据进行条件生成,以产生多个确定性随机位(DRB)串,并产生多个非确定性随机位(NRB) 响应于读取种子值的第一指令,从DRNG检索NRB字符串中的一个并将NRB字符串存储在由第一指令指定的目的地寄存器中,耦合到DRNG的执行单元。

    DETECTION OF RETURN ORIENTED PROGRAMMING ATTACKS
    7.
    发明申请
    DETECTION OF RETURN ORIENTED PROGRAMMING ATTACKS 有权
    返回面向编程攻击的检测

    公开(公告)号:US20140123281A1

    公开(公告)日:2014-05-01

    申请号:US13664532

    申请日:2012-10-31

    IPC分类号: G06F21/00

    摘要: In one embodiment, a processor includes at least one execution unit and Return Oriented Programming (ROP) detection logic. The ROP detection logic may determine a ROP metric based on a plurality of control transfer events. The ROP detection logic may also determine whether the ROP metric exceeds a threshold. The ROP detection logic may also, in response to a determination that the ROP metric exceeds the threshold, provide a ROP attack notification.

    摘要翻译: 在一个实施例中,处理器包括至少一个执行单元和返回定向编程(ROP)检测逻辑。 ROP检测逻辑可以基于多个控制传送事件来确定ROP度量。 ROP检测逻辑还可以确定ROP度量是否超过阈值。 ROP检测逻辑还可以响应于ROP度量超过阈值的确定,提供ROP攻击通知。

    User opt-in processor feature control capability
    9.
    发明授权
    User opt-in processor feature control capability 有权
    用户选择加入处理器功能控制功能

    公开(公告)号:US07779239B2

    公开(公告)日:2010-08-17

    申请号:US10900875

    申请日:2004-07-28

    摘要: A processor includes a feature control unit to enable or disable one or more processor features individually in response to a user selectable setting. The feature control unit is adapted to disable the processor feature(s) if the user setting has not been updated in accordance with an input regardless of the value of the user setting prior to the update and to enable or disable the processor feature(s) in accordance with the updated user setting after it has been updated. The feature control unit may also include a lock unit to prevent changes to the updated user setting and a software feature selection unit to enable or disable processor features in response to a software feature selection setting and, optionally, only enable or disable processor features whose corresponding updated user setting is user enabled. The feature control unit may also include mechanisms to detect illegal feature selection conditions.

    摘要翻译: 处理器包括特征控制单元,以响应于用户可选择的设置来单独启用或禁用一个或多个处理器特征。 如果没有根据输入更新用户设置而不考虑更新之前的用户设置的值,并且启用或禁用处理器特征,则特征控制单元适于禁用处理器特征, 根据更新后的用户设置进行更新。 特征控制单元还可以包括用于防止更新的用户设置的改变的锁定单元和软件特征选择单元以响应于软件特征选择设置来启用或禁用处理器特征,并且可选地,仅启用或禁用其相应的处理器特征 更新的用户设置是用户启用的。 特征控制单元还可以包括检测非法特征选择条件的机制。

    Processor unique processor number feature with a user controllable disable capability
    10.
    发明授权
    Processor unique processor number feature with a user controllable disable capability 有权
    处理器独特的处理器号码功能,具有用户可控的禁用功能

    公开(公告)号:US06289459B1

    公开(公告)日:2001-09-11

    申请号:US09235054

    申请日:1999-01-20

    IPC分类号: G06F1100

    摘要: A software method of setting a state in a processor regarding whether a processor number encoded in the processor will be available for reading is described. The method comprises prompting the user to enter an indication whether the processor number should be available for reading by a program. Then, setting a state to inhibit the processor number from being read by a program if the indication indicates that the processor number should not be available for reading by the program. For one embodiment, the method further includes testing the indication if a request for the processor number is received, and releasing the processor number if the indication indicates that the processor number is available.

    摘要翻译: 描述了在处理器中设置处理器中编码的处理器编号是否可用于读取的状态的软件方法。 该方法包括提示用户输入处理器号码是否应可供程序读取的指示。 然后,如果该指示指示处理器号码不可用于程序读取,则设置状态以阻止处理器号码被程序读取。 对于一个实施例,所述方法还包括:如果接收到对所述处理器号码的请求,则测试所述指示,以及如果所述指示指示所述处理器号码可用则释放所述处理器号码。