Release of Technical Report into the AMD Security Processor

Google Project Zero and Google Cloud published a technical report on a security review of the AMD Secure Processor (ASP) in 3rd Gen AMD EPYC (Milan), focusing on SEV and the SNP extension for confidential computing. The review, conducted with AMD cooperation and access to source code and hardware, uncovered 19 issues—including cryptographic misuse and firmware memory corruption—that could impact the integrity and confidentiality protections of virtual machines; AMD has issued fixes and public bulletins addressing the findings.