I-Intel vs AMD, iprosesa yayo ikhuseleke ngakumbi?

Njengoko abasebenzisi kunye nabasebenzisi abaninzi beqala ukuthandabuza ukuba yeyiphi iprosesa enokuthi ikhusele iikhompyuter zabo, idatha kunye nezinto ezenziwa kwi-intanethi, umzabalazo wexesha elide phakathi kwe-Intel ne-AMD usandula ukungena kwinqanaba elitsha.

Nangona uninzi lwabasebenzisi kunye nabaphandi be-cybersecurity bekhathazekile malunga nobuthathaka besoftware, obu bunzima bubonakala bungasayi kuze butshabalale. Nangona kunjalo, ukuqala ngoJanuwari ngo-2018, abasebenzisi abaninzi kunye nabaphandi bezokhuseleko baqonda ukuba iihardware ezisebenzisa izixhobo zethu azikhuselekanga okanye ngaphandle kwemicimbi enzulu yokhuseleko njengoko besicinga.

Oku kwasishiya nombuzo: Yeyiphi iprosesa yenkampani ekhuselekileyo ngakumbi? Idatha yophando ikholelwa ukuba i-Intel okwangoku ine-242 ebhengeza esidlangalaleni, ngelixa i-AMD ine-16 kuphela kwaye kubonakala ngathi abavavanyi be-AMD bakhuselekile kakhulu, kodwa iinkampani zombini zenze uthotho lweenzame kukhuseleko.

NgoJanuwari ka-2018, iGoogle "Zero" yeprojekthi yezokhuseleko kunye nenani labaphandi bezokhuseleko abazimeleyo batyhila iziphoso zoyilo lwe-Meltdown kunye ne -pecter CPU. Ubukho bala mngcipheko lukhetho loyilo olwenziwe uninzi lwamaqela ezakhiwo ze-CPU ukuphucula ukusebenza kwe-chip. Ukutyibilika kuya kuchaphazela i-Intel chips, ukuvumela abathengi ukuba badlule kwisithintelo sehadiwe phakathi kwabasebenzisi kunye nememori yekhompyuter, enokuvumela abathengi ukuba bafundele imemori yekhompyuter kunye nokubiwa kwamaphasiwedi; Isicaphucaphu siya kuchaphazela i-Intel, AMD kunye ne-ARM chip, kwaye zenze ukuba abakhangeli banakho ukujika izicelo ezingalunganga zibe yimfihlo ezivuzayo.

Ukucacisa kunye nokuyehla kukujolise kwimisebenzi esisiseko ye-chip kunokuba kukungakhuseleki kwisoftware, esona sisicombululo sokhuseleko esibi kakhulu kule minyaka idlulileyo. Phantse akunakwenzeka ukugcina i-CPU ikhuselekile ngokupheleleyo kwiSpecter nakwiMeltdown, kunye nokunciphisa isoyikiso, ufuna uyilo olutsha lwe-CPU. Ngamafutshane, uhlaselo lweSpecter and Meltdown lujolise kwitekhnoloji ye-OoOE ithembele kuyo i-CPU iminyaka. Abaphuhlisi be-CPU abaze basebenzise ezinye iindlela zokuphucula ukusebenza kuba azisebenzi njengeendlela ezindala. Kwaye nokuba kukho ulwakhiwo olungcono lwe-CPU kwixa elizayo, kunokubakho imingxunya yokhuseleko. Umthombo ovulekileyo awuqinisekisi ukuba i-CPU ayikhuselekanga kuhlaselo lwangaphandle kuba olu hlaselo alukabikho. I-Intel ihlaselwe kukubetha okukhulu esidlangalaleni ngokuchasene neMeltdown kunye nokuchazwa kweSpecter.

Ukubulawa okuqatshelweyo kuvelise ezinye iimpazamo ezithathu, ezizezi, i-TLBleed, I -hlathi lokugquma kunye neZombieload, ezenza ukungakhuseleki kwetekhnoloji ye-Intel. Umseki we-OpenBSD u-Theo de Raadt walumkisa ngokufakwa kwi-Hyper-Threading kwiikhompyuter ze-Ingo ukusuka ekuqaleni. Emva koko, uGoogle kunye nabathengisi be-OS abanjengo-Apple bajoyina inkampu yeqela eliphikisayo i-OpenBSD. UGoogle okhubazekile ukuHamba-hlutha kuzo zonke ii-Chromebooks, kwaye i-Apple yatsho kuphela ukuba ukunciphisa i-Zombieload kunye nezinye iisampulu zedatha yoyilo lweemveliso ezincinci (MDS), uHyper-Threading, olu lukhetho lomsebenzisi.

I-Intel ikwacebisa ukukhubaza i-Hyper-Threading, kodwa kuphela kubathengi abathile "abanakuqinisekisa ukuba isoftware ethembekileyo iyasebenza kwiinkqubo zabo." Kodwa, enyanisweni, xa wonke umntu eqhuba isoftware yabanye abantu kwi-PC okanye kwi-server yabo, banokukuxelela ngokuqinisekileyo ukuba yintoni ethembekileyo kwaye yeyiphi?

Ii-CPU ze-AMD zichatshazelwa yiPortSmash, umngcipheko ochaphazela ukusebenza ngaxeshanye kwe-multithreading (SMT), ngokufana ne-Intel's hyperthreading. Iiprosesa ze-AMD zikwasesichengeni sokuhlaselwa yiNetSpectre kunye neSplitSpectre, ngenxa yokuba obu bungozi buchaphazela iprosesa, kwaye ezi nkqubo zisengozini kuhlaselo lwe-V1, kunye nokwahlukileyo kuka-2, ekhuphe uhlaziyo loku, kodwa ibonisa ukuba kuthelekiswa yoyilo lwe-Intel, uyilo lwayo luhlukile, "umngcipheko wokusetyenziswa uphantse ube ngu-zero."

Iichips ze-AMD ziya kuhlaselwa kwakhona ziintlanu kwezi ntlanu ziHlanu zeMeltdown kunye nohlaselo lweSpecter olufunyenwe ngabaphandi, kwaye ii-Intel's chips zisemngciphekweni woku kuxhwaleka kasixhenxe. Ii-CPU ze-AMD (kubandakanya ii-processor zeRyzen kunye ne-Epyc) azichaphazeleki zi-Meltdown (iSpecter v3), iSpecter v3a, i-LazyFPU, i-TLBleed, iSpecter v1.2, i-L1TF / i-Foreshadow, i-SPOILER, i-SpectreRSB, ukuhlaselwa kwe-MDS (i-ZombieLoad), i-FID ), I-SWAPGS.

Akunzima ukufumana ukuba i-CPU ye-AMD ibonakala ngathi inokuguquguquka ngakumbi ekuhlaselweni kokubulawa okuqingqiweyo kuneeprosesa ze-Intel. Nangona kunjalo, iziphene ezifanayo neSpecter v1 zibonakala ngathi ziyaqhubeka nokuchaphazela abaqhubekekisi be-AMD. Iindaba ezimnandi zezokuba kwiimeko ezininzi, i-Specter v1 firmware mitigations inokuthintela kwakhona le mingcipheko mitsha.

Zombini i-Intel kunye ne-AMD zikhuphe i-firmware kunye ne-patches yesoftware yazo zonke ezi ziphene zingasentla, kodwa ukuba inkqubo yokuhlaziya ixhomekeke kumama okanye isixhobo somenzi kwaye hayi kwi-Intel / AMD okanye kumthengisi we-OS, ayizizo zonke iziphene ezifike kumthengi, ezinje IMicrosoft. I-Apple, njl.

Ngaphambi kokuba yaziwe esidlangalaleni, abenzi beziphi babeneenyanga ezinokuba ntandathu zokulumkisa ngesiphene sokuqala kunye nesiphene seMeltdown. Oku kuyaphikiswa kuba ayingabo bonke abathengisi benkqubo yokusebenza abakwaziyo ngaxeshanye, kwaye abanye abathengisi banokufuna iintsuku okanye iiveki ukuzisombulula.

Ngokwengxelo yakutshanje, zonke iipatches ii-Intel kufuneka zibonelele ukunciphisa i-PC yomsebenzisi kunye nesantya seseva ephindwe kahlanu kunaleyo ye-AMD. Lo ngumsantsa omkhulu, ikakhulu ngenxa yokuba i-Intel kufuneka isombulule imingxunya yokhuseleko ngakumbi kune-AMD.

I-Intel yenza ezinye iinzame zokunciphisa isantya sendlela eyahlaselwa yizixhobo zekhompyutha, kodwa ayikhange iqwalaselwe ziingcali ukuthintela uhlaselo olutsha olufanayo. Ke ngoko, ukuba i-Intel, i-AMD kunye nabanye abenzi behip bayathandabuza ukutshintsha uyilo lobumbeko lwabo lwe-CPU, abasebenzisi banokuhlaselwa ngokuhlaselwa kwinqanaba lokudlula ngokungapheliyo.

Nangona kunjalo, i-Intel Front View ilungisa imeko ethile ebuthathaka nge-chip-in fix. Umzekelo, i-Intel yongeze iitranski ezisekelezelwe kwizinto ze-Hardware kwizinto ezinobuthathaka obuninzi njenge-MSBDS, Fallout, and Meltdown. I-AMD ayongelanga iindlela zokunciphisa i-intra-silicon kwii-chips zayo esele zithunyelwe, kodwa endaweni yoko ziyisebenzise kwiimodeli ezintsha. Kufanelekile ukuchaza ukuba i-AMD ayidingi kwenza utshintsho oluninzi njenge-Intel ukukhusela ngokuchasene nengxaki, ngenxa yoko ayifuni iipakethi ezisekwe kwi-Hardware.

Imizamo ye-Intel ne-AMD

Emva kokuba abaphandi beveze ukuba sesichengeni kokuchazwa okokuqala, u-Intel wathembisa ukubeka ukhuseleko kuqala. Inkampani ithembise ukunciphisa umngcipheko weengozi zeSpecter kubuxhakaxhaka bezinto, uninzi lwazo luwele kwisizukulwana sangoku seeprosesa.

Kodwa ekugqibeleni, ezi zizilungiso nje ezincinci kwiingxaki ezingafanele ukuba zichithwe ekuqaleni, kwaye abasebenzisi bafuna ukhuseleko endaweni yokulungisa izakhiwo ezaphukileyo. Ke, kuthekani ngeeprosesa zeIntel zokhuseleko lwabasebenzisi?

Isoftware Guard eXtensions (SGX) yeyona nto ithandwayo neyaziwayo iprosesa yenkqubo ye-Intel ekhuphe kwiminyaka edlulileyo. I-SGX yenza ukuba izicelo zigcine idatha ezibuthathaka ezinje ngezitshixo zokubethela kwindawo ekhuselekileyo kwindawo efakiweyo ye-RAM engafikeleleki kwinkqubo yokusebenza eyamkelayo okanye ezinye iinkqubo zomntu wesithathu. Isicelo esinjenge-End-to-end encryched Messenger Messenger siyasetyenziswa ukuze kukhuseleke abasebenzisi ngokukhuselekileyo.

I-Intel isandula ukubhengeza izicwangciso zokuphucula i-SGX ukuze inike imemori efihlakeleyo (i-TME) endaweni yokufihla kuphela inxalenye encinci yememori njenge-SGX.

Ukufihlwa kwememori ye-Hardware kuzisa izibonelelo ezibalulekileyo zokhuseleko kubasebenzisi kuba kwenza ukuba kube nzima kwizicelo ezizayo ukweba idatha (iinkqubo zokusebenza ezigunyazisiweyo zikwabeka nezithintelo ezingqongqo kwii-API ezivumela usetyenziso ukuba lwabelana ngedatha). Nangona kunjalo, akucacanga ukuba i-Intel kunye ne-AMD bazimisele ukushiya le nto ifumaneka kubathengi bezorhwebo, okanye ukuba iya kuvunyelwa na abasebenzisi abaphambili.

Intshukumo ye-Intel kwi-SGX iphambi kwe-AMD okwethutyana, ngoko i-AMD ifike emva kwexesha kwindawo yokugcina encryption. Nangona kunjalo, iprosesa yaseRyzen ye-AMD inezo zombini iiMemori eziKhuselekileyo zoMemori (i-SME) kunye ne-Virtualization ekhuselekileyo yokuSebenzisa (SEV), esele ikho kwaye isemagqabini ngakumbi kune-Intel. I-TSME (i-Transparent SME) sisiseko esingqongqo seSMEs esifixela yonke imemori ngokungagqibekanga kwaye ayifuni ukuba isicelo siyixhase ngekhowudi yayo.

Ngapha koko, njenge-Intel's SGX, ii-SEVs zisesichengeni sokuhlaselwa ngomkhondo okanye olunye uhlaselo olusebenzisa uhlaselo lokufikelela ngokufihlakeleyo. I-AMD kunye neIntel zisenomsebenzi omninzi ekufuneka ziwenzile ukuqinisekisa ukuba ezi mpawu ziphantse zangabi mthethweni.

ukuququmbela

Ngexesha elifutshane, ngaphandle kweenzame ezilungileyo kakhulu kuzo zombini iinkampani, imeko inokuba mandundu ngakumbi ngaphambi kokuba i-AMD kunye neenkqubo ze-Intel zikhuseleke ngakumbi. Abasebenzisi banokufumana ngakumbi amanyathelo okuthomalalisa izixhobo-mhlawumbi anele ukwanelisa abathengi abaninzi kunye namajelo eendaba, kodwa akwanelanga ukusombulula zonke iingxaki ngenxa yabo bonke ubunzima kunye neendleko ezichaphazelekayo ekubuyiseni uyilo oluphambili lwesakhiwo.

Kwiminyaka embalwa ezayo, abasebenzisi baya kufumana kwakhona amanqaku okhuseleko amatsha anomdla kwi-Intel ne-AMD. Nangona kunjalo, njengoko banda nangakumbi abaphandi abaqala ukuloba nzulu kubuchule babo obuncinci be-CPU, banokubanjwa kwiingxelo zokungakhuseleki ngakumbi ezifunyenwe kwiinkqubo zeenkampani ezimbini kwiminyaka embalwa ezayo.

Ezi nkampani zimbini ziya kuchitha iminyaka zilungisa iziphoso abaphandi abazifumeneyo kuyilo olutsha zoyilo ukwenza iprosesa ukuba ikhule ngakumbi.

Buyela kumbuzo wokuqala, ngubani onokunika iprosesa ekhuselekileyo ngakumbi ukuba inike abasebenzisi eyona ndlela ikhuselekileyo? Ngokusekwe koku kungasentla:

Okokuqala, i-Intel okwangoku ine-242 ebhengeza esidlangalaleni, kwaye i-AMD inezikhewu ezili-16 kuphela. Umsantsa mkhulu kakhulu ukuba unganakwa.

Okwesibini, kubonakala ngathi ingaphantsi kwesiqingatha sezinto ezinobungozi ezichazwe kwi-Intel ukusukela ekuqaleni kuka-2018 kuchaphazele i-AMD's Ryzen kunye ne-Epyc CPUs. Oku kusenokubangelwa kukuba abaphandi abangafundisanga ii-CPUs ze-AMD. Kodwa uyilo lwe-AMD luyilo olutsha lweRyzen lithathela ingqalelo ukhuseleko lwe-Intel ngokuyintloko olusisiseko se-Nehalem. Ubuncinci ukusukela ekuqalisweni kwe-Nehalem Microarchitecture ngo-2008, uninzi lwezinto ezihlaselayo zokuhlaselwa zichaphazela i-Inteli ye-CPU;

Okokugqibela, ngokukhutshwa koyilo olutsha lwe-Zen, i-AMD ibonakala ingaphambi kwe-Intel ekuxhaseni imiba emitsha ye-encryption. Nokuba i-AMD iya kugcina eli santya ngokwezokhuseleko ihlala ibonwa, njengoko i-Intel izama ukusombulula zonke iingxaki zeSpecter kunye nokuphucula umfanekiso wayo phakathi kwabathengi, kodwa ubuncinci okwangoku, kubonakala ngathi i-AMD ikhokelela.

Ke ngoko, abaqhubekisi be-AMD babonakala njengeqonga elikhuselekileyo ngakumbi kwixesha eliphakathi neliphakathi, ngaphandle kokujonga konke ukuthotywa kwemisebenzi okubangelwa ziipatches ezinxulumene neSpecter kuzo zombini iinkqubo ezindala nezintsha.