{"guid":"cb4c1ad1-eecf-5c82-ba50-c3f521caadd5","title":"EntrySign: create your own x86 microcode for fun and profit","subtitle":null,"slug":"why2025-156-entrysign-create-your-own-x86-microcode-for-fun-and-profit","link":"https://program.why2025.org/why2025/talk/9WTQU3/","description":"We present EntrySign, a cryptographic flaw in AMD’s microcode patch verification logic, including how we discovered the bug and how you can extend our results. EntrySign lets us execute arbitrary microcode on all AMD CPUs from Zen to Zen 5 and modify the behavior of x86 instructions. We will delve into the format of AMD microcode, how their patches are verified, how we were able to reverse engineer this process, and how we were able to access the key information required to defeat it.\n\nLicensed to the public under https://creativecommons.org/licenses/by/4.0/","original_language":"eng","persons":["Nspace","spq"],"tags":["156","2025","why2025","Hacking","Andromeda","why2025-eng","Day 4"],"view_count":232,"promoted":false,"date":"2025-08-10T23:00:00.000+02:00","release_date":"2025-08-12T00:00:00.000+02:00","updated_at":"2026-03-20T11:00:05.322+01:00","length":2949,"duration":2949,"thumb_url":"https://static.media.ccc.de/media/events/why2025/156-cb4c1ad1-eecf-5c82-ba50-c3f521caadd5.jpg","poster_url":"https://static.media.ccc.de/media/events/why2025/156-cb4c1ad1-eecf-5c82-ba50-c3f521caadd5_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/why2025/156-cb4c1ad1-eecf-5c82-ba50-c3f521caadd5.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/why2025/156-cb4c1ad1-eecf-5c82-ba50-c3f521caadd5.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/why2025-156-entrysign-create-your-own-x86-microcode-for-fun-and-profit","url":"https://api.media.ccc.de/public/events/cb4c1ad1-eecf-5c82-ba50-c3f521caadd5","conference_title":"What Hackers Yearn 2025","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025","related":[],"recordings":[{"size":372,"length":2949,"mime_type":"video/webm;codecs=av01","language":"eng","filename":"why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-08-12T16:34:09.995+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/av1-hd/why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/89943","event_url":"https://api.media.ccc.de/public/events/cb4c1ad1-eecf-5c82-ba50-c3f521caadd5","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":45,"length":2949,"mime_type":"audio/mpeg","language":"eng","filename":"why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2025-08-12T15:18:11.029+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/mp3/why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/89880","event_url":"https://api.media.ccc.de/public/events/cb4c1ad1-eecf-5c82-ba50-c3f521caadd5","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":121,"length":2949,"mime_type":"video/webm","language":"eng","filename":"why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-08-12T19:27:25.005+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/webm-sd/why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/90051","event_url":"https://api.media.ccc.de/public/events/cb4c1ad1-eecf-5c82-ba50-c3f521caadd5","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":458,"length":2949,"mime_type":"video/webm","language":"eng","filename":"why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-08-12T19:20:19.480+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/webm-hd/why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/90049","event_url":"https://api.media.ccc.de/public/events/cb4c1ad1-eecf-5c82-ba50-c3f521caadd5","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":127,"length":2949,"mime_type":"video/mp4","language":"eng","filename":"why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-08-12T15:22:42.865+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/h264-sd/why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_sd.mp4","url":"https://api.media.ccc.de/public/recordings/89891","event_url":"https://api.media.ccc.de/public/events/cb4c1ad1-eecf-5c82-ba50-c3f521caadd5","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":27,"length":2949,"mime_type":"audio/opus","language":"eng","filename":"why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2025-08-12T15:18:14.973+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/opus/why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_opus.opus","url":"https://api.media.ccc.de/public/recordings/89881","event_url":"https://api.media.ccc.de/public/events/cb4c1ad1-eecf-5c82-ba50-c3f521caadd5","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":461,"length":2949,"mime_type":"video/mp4","language":"eng","filename":"why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-08-12T15:17:37.263+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/h264-hd/why2025-156-eng-EntrySign_create_your_own_x86_microcode_for_fun_and_profit_hd.mp4","url":"https://api.media.ccc.de/public/recordings/89877","event_url":"https://api.media.ccc.de/public/events/cb4c1ad1-eecf-5c82-ba50-c3f521caadd5","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"}]}