Apple CPUs have a flaw that makes key extraction possible

TLDR; this may also affect Metamask and other crypto wallets. So Mac users might want to consider Trezor or other hardware wallet.

GoFetch is a microarchitectural side-channel attack that can extract secret keys from constant-time cryptographic implementations via data memory-dependent prefetchers (DMPs).

We show that DMPs are present in many Apple CPUs and pose a real threat to multiple cryptographic implementations, allowing us to extract keys from OpenSSL Diffie-Hellman, Go RSA, as well as CRYSTALS Kyber and Dilithium.