Windows 11 caused a lot of confusion when it was first released due to the strict system requirements introduced by Microsoft. Only modern microprocessors from AMD and Intel are supported as they are said to have enhanced security support compared to previous generation CPUs (i.e. Intel 7th generation "Kaby Lake" and AMD Zen (Ryzen 1000) or earlier).
However, Microsoft has discovered an issue with CPUs that support VAES instructions. The company noted that such Windows 11 and Windows Server 2022 devices are "vulnerable to data corruption" because the Advanced Encryption Standard (AES) directives are designed to speed up data encryption and any errors in them are bound to adversely affect device data.
Here's how Microsoft describes the issue:
Windows devices that support the latest Vector Advanced Encryption Standard (AES) (VAES) instruction set may be vulnerable to data corruption. Affected Windows devices use one of the following on new hardware:
- AES XEX-based Tweaked Codebook Mode with Ciphertext Stealing (AES-XTS)
- AES with Galois/Counter Mode (GCM) (AES-GCM)
This issue was resolved with previous Windows updates KB5014746 and KB5014019 Successfully resolved by Microsoft. Users can expect to see an impact on BitLocker, TLS, and disk throughput performance after installing the workaround update
To prevent further data corruption, we are releasing a preview release on May 24, 2022 This issue is resolved in the security release on June 14, 2022. After applying these updates, you may notice performance degradation for nearly a month after installing them on Windows Server 2022 and Windows 11 (original version). Scenarios where performance degradation may occur include:
- Bit locks
- Transport Layer Security (TLS) (especially load balancers)
- Disk throughput, especially for enterprise customers
You can find more details on Microsoft's official website for this issue Described in support article KB5017259.
We did some investigating of our own, as Microsoft has not released an official list of affected CPUs. The VAES instruction was introduced in 2018, which means that all processor models supporting Windows 11 are definitely affected by this issue.
From the depths of the internet, we discovered that Intel CPUs starting with the 10th generation Ice Lake 10nm mobile chips are affected since they first introduced VAES instructions in the new Sunny Cove design. Intel has taken significant steps to move away from the 2015 Skylake architecture and its subsequent versions. On AMD's side, the Zen 3-based Ryzen 5000 series desktop SKUs are taking a hit, as well as Ryzen 5000 mobile parts.
Interestingly, this is not the first time users have encountered processor performance issues with Windows 11 support. It was revealed last year that Virtualization-Based Security (VBS) was severely impacting gaming even on supported chips.
The above is the detailed content of NOTE: Windows 11-ready CPUs with VAES 'vulnerable to data corruption', full CPU list here. For more information, please follow other related articles on the PHP Chinese website!