AMD Quietly Killed Memory Encryption on Ryzen - and Users Caught Them

AMD pulled Transparent Secure Memory Encryption (TSME) from consumer Ryzen chips, and only reinstated it after Linux users caught the silent downgrade. That's the kind of hardware security drama that makes you double-check every BIOS update.

How TSME Protects Your Data From Physical Attacks

TSME encrypts the entire contents of system memory, making data useless to an attacker with physical access - cold boot attacks, bus sniffing, or pulling the RAM and reading it on another machine. AMD added TSME to high-end CPUs about a decade ago, then rolled it down to consumer Ryzen (the non-Pro lineup) over subsequent years. Users expected the protection to stay.

The Silent Removal and the Linux Detection Gap

Recently, without any patch notes or announcement, AMD stripped TSME from lower-end Ryzen processors. On Windows machines, the change was invisible - no error, no popup, just memory suddenly running in plaintext. Linux users, however, could check dmesg or query the CPU's feature flags and immediately see the encryption engine was missing. AMD initially declined to explain or even acknowledge the removal. That's the part that stings: a security feature disabled in silicon with zero transparency, and no recourse for users who didn't run Linux.

User Backlash Forces a Reversal

Within a week of Ars Technica's report, AMD reversed course and reinstated TSME on the affected consumer CPUs. The company still hasn't published a public explanation for why it was removed in the first place - cost savings? A spec change in a microcode revision? We don't know. But the reversal makes one thing clear: when a technically literate user base can detect stealth security changes, the vendor gets held accountable.

This episode is a reminder that silent security regressions in silicon are hard to hide from a community that knows how to read CPUID output. Next time, AMD might think twice before quietly flipping a bit that makes everyone's memory readable.

Source: Following user outcry, AMD reinstates memory encryption in consumer CPUs
Domain: arstechnica.com