Explained: AMD HD3D technology: what you need to know

AMD HD3D technology: what's it all about?

Stereoscopic 3D might not be to everyone's tastes, but it's certainly a lucrative business.

For the past few years Nvidia has enjoyed a virtual stereo 3D monopoly on the PC with its 3D Vision technology, but AMD has belatedly entered the ring with its own technology called HD3D.

For those who have heavily invested in Nvidia's technology it might be too little too late, but AMD's new offering introduces a number of innovations that make it worth considering – even if you think stereo 3D is just an expensive way to get a headache.

• Read our Nvidia 3D Vision review

The biggest attraction of HD3D is AMD's commitment to making it an open platform that supports many different standards. Unlike Nvidia's approach, where you're tied to Nvidia 3D Vision-certified hardware, HD3D's open ecosystem should allow for a more diverse choice.

It's pretty encouraging that AMD seems to have identified one of consumer stereoscopic 3D's biggest problems, and the reason why so many of us have so far held back from embracing stereo 3D: the vast and confusing array of incompatible 3D standards. If AMD's mission with HD3D is to allow us to buy 3D hardware from various different manufacturers, without us having to worry whether it will all work together, that can only be a good thing for us consumers – and might lead to more of us setting up our rigs for 3D.

How it works

When it comes to three-dimensional gaming, the bulk of the stereo horsepower comes from the HD3D driver. The driver uses a quad-buffer to produce stereo 3D. Usually with non-stereo 3D graphics (monoscopic) the driver uses double-buffering.

This is where the GPU renders content to one specific place in memory, known as a buffer. At the same time, a second buffer is used to deliver the display output of the GPU to a monitor or other display. Quad-buffering essentially doubles this, producing two images – one for the left eye and one for the right – for every frame generated.

AMD's Direct3D engineering team produced an API that supports OpenGL and DirectX 9, 10 and 11. AMD's open approach allows middleware partners, such as DDD and iZ3D to convert games from monoscopic to stereoscopic. This takes some of the pressure off AMD to ensure games are compatible with HD3D and has led to an already impressively long list of compatible games.

Launching into HD3D

If you want to set up HD3D then the first thing you need to do is make sure that you've got a supported Radeon graphics card. The ATI Radeon HD 5000 Series using Catalyst 10.10 or later and AMD Radeon HD 6000 series or above are compatible.

You can also use HD3D if you have an HP Envy 17 3D with ATI Mobility Radeon HD 5850, an MSI Wind Top AE2420 All-in-One with ATI Mobility Radeon HD 5730, or a Lenovo IdeaPad y560d with ATI Mobility Radeon HD 5730.

You'll also need a 3D-capable display device, like a 3D monitor, TV or projector. There are plenty of supported devices – click here for a full list. If the display device is a 3D TV or a 3D projector then it needs to support HDMI 1.4a, and you'll need an HDMI 1.4a cable.

Unless you can afford a glasses-free 3D display, you'll need the chunky eyewear too. You'll also want DDD's TriDef 3D for the AMD HD3D driver, or the iZ3D 3D driver for 3D gaming.

Thanks to AMD's partnership with the middleware driver makers, you can get 50 per cent off either driver if you have HD3D compatible hardware. Make sure you have the latest AMD Catalyst 10.10 software or later from AMD's website. Install either the DDD TriDef 3D or iZ3D drivers and select either 'AMD – AMD HD3D Technology (HDMI 1.4a)' or '120Hz 3D Devices' respectively.

You'll then need to set your desktop resolution to 1,920 x 1,080, 24Hz or 1,280 x 720, 60Hz. Using either TriDef 3D or iZ3D you need to select the game profile and point the software to the game's executable file, and then launch the game itself from inside the 3D software.

AMD has outsourced a lot of the work involved in creating compatible games to the third party middleware companies iZ3D and DDD. Headline games include Call of Duty: Modern Warfare 2, Mass Effect 2 and World of Warcraft, and are included in a growing list of compatible games.

You can be pretty confident that the biggest new releases will be compatible, but for a full list of compatible games go to iz3d.com/games and the TriDef website.

It's not all down to third parties though. AMD is working directly with games developers on native support for HD3D. This year AMD worked closely with Eidos to support native stereo 3D in Deus Ex: Human Revolution. This meant that Eidos rendered images for both the left eye and the right eye in game, and was able to utilise HD3D's quad-buffer without the need for middleware.

Hopefully as the HD3D standard gains popularity, more games will include native support as they are released. So how does AMD's plucky little David compare to Nvidia's Goliath?

In terms of performance and raw power, Nvidia's head start in stereo 3D certainly gives 3D Vision the edge. HD3D's reliance on the HDMI 1.4a specification leaves it with a maximum TMDS throughput of 10.2Gb/s, allowing for 1080p gaming at 24 frames per second for each eye, or 720p at 60 frames per second.

This is a lot lower than 3D Vision Surround's dual-link DVI connection capable of resolutions up to 5,760 x 1,080 over dual monitors. AMD hopes that as more new monitors begin to support DisplayPort 1.2, HD3D will be able to get around HDMI 1.4a's limitations with a bandwidth of 17.28Gb/s – enough for 1080p at 60 frames per second per eye.

HD3D vs 3D Vision

AMD's embrace of open standards really sets the HD3D apart from Nvidia's 3D Vision. Not being tied to specific hardware and standard restrictions gives us far greater scope to build a 3D-capable rig that meets our needs.

It can also be more cost effective – not only can we shop around for the best components at the best prices, we can also avoid some of the hidden costs associated with Nvidia 3D Vision. You don't need a propriety 3DTV Play driver to play 3D Blu-rays, and you don't have to rely on expensive USB emitters.

You do need to pay for third party middleware drivers, though. Still, there is enough potential in HD3D to get us excited about its future, and to cause Nvidia some concern over 3D Vision's future.

Related Stories

• AMD's Radeon HD 7970 gets reviewed
• AMD Radeon HD 7950 launched at last

Explained: How Windows protects your PC

How Windows protects your PC

Your Windows computer should, if you're sensible, already have formidable defences in the form of advanced anti-malware.

However, we're now entering an age of cloud computing, filled with downloadable applets, at a time when we're also fighting an intense arms race against ever more ingenious malware writers.

Because of this, your PC's defences have to handle code from many sources and still protect you from outside threats.

How is this possible, and what ways have the bad guys already found to thwart these efforts? Most importantly, how can you be sure your computer only runs what you think it's running?

Signing in

Unlike applications purchased from trusted vendors, when you download applets or freeware made by individuals, there's no way the average user (or even the security professional) can be sure that the software they think is running isn't actually something else entirely.

With the arms race between developers and hackers now gathering pace, it could take more than just advanced antivirus software to match the state of the art in malicious programming. Luckily, Windows has an ingenious way to protect itself. This is Microsoft's Authenticode system.

You'll have seen evidence of Authenticode in action when you try to install software that hasn't been through a process known as signing. A warning popup appears, explaining that the installation program's publisher could not be verified and offering you a chance to stop it running.

Unique signature

Programs are signed using an encryption algorithm like RSA. This uses a publicly available encryption key to create a globally unique signature code that describes the program being verified. Being public, anyone can get the key used to sign the code.

The operating system obtains it, generates its own copy of the signature and compares it with the one supplied with the program. If they match, the code is what the supplier says it is, and it can be allowed to run.

These encryption keys are held by several large and trusted security companies (certificate authorities) in the form of publicly accessible digital certificates that contain the details of the company that issued the program your operating system is trying to verify, as well as the unique signature of the program itself.

If you're a developer, having a certification authority generate a digital certificate to show that you and your code can be trusted is usually a costly and involved process. Obtaining a commercial certificate for your company means proving beyond any doubt that you are who you claim to be.

According to Microsoft, your physical presence may be requested as a representative of your business to verify your identity against photo ID. The business itself must also have a suitable Dun and Bradstreet rating. This rating is a measure of your company's financial stability and indicates that among other things that the company is still in business. This prevents hackers from simply posing as a company that has quietly stopped trading in order to gain a false certificate for malicious purposes.

Finally, applicants must also pledge not to distribute malware. Whether this final measure is any more than lip service is up for debate.

Individual developers can also obtain a personal certificate to sign their products. In this case, no Dun and Bradstreet rating is required, but your credentials will be checked against consumer databases to make sure you are who you say you are. In both cases, obtaining a certificate will usually cost you a fair amount of money.

With so many certificate authorities, it pays to shop around for the best deal. A one-year Microsoft Authenticode certificate from VeriSign, for example, will cost you $499 (about £250). If you expect people to download and install your software beyond one year, you'll have to renew the certificate or your code will become unsigned again.

Public keys

Eagle-eyed readers might have spotted that the use of public keys is the same general mechanism used in encrypting email and SSH, where it's used to prove that the server to which you're trying to make a secure, encrypted connection is the real thing and not a dummy that's been set up to skim usernames and passwords.

The main problem with signing code is that the average user has no idea what the associated popup means when the code's publisher cannot be verified. There's a tendency to take a chance on becoming infected and to leave everything to the antivirus software, but what if this fails to spot malicious code?

Sandboxing explained

In the sand

One solution is to use a 'sandbox' to quarantine running code so that any attempt to make unauthorised changes to the system can be prevented caught before they are carried out. Some antivirus software (even free versions) now provides the facility to automatically run suspect or unsigned programs in a sandbox.

Perhaps more importantly, web browsers are also beginning to use sandboxes, which is another good reason to abandon that old version of Internet Explorer. The ability of malicious or hijacked sites to silently install code on your computer simply by surfing to them will be greatly reduced.

A sandbox operates a little like a virtual machine, in that it provides the running code with a virtual environment containing everything it needs to believe it's running on real hardware. However, it actually runs in a carefully crafted simulation with severe limits placed on it. Any changes to the actual operating system are never allowed to propagate beyond the sandbox.

The sandbox used in Google's Chrome browser is a good example of the concept in action. Rather than write a complete virtualisation product, the developers used Windows' own security model to help Chrome achieve its renowned speed.

Chrome's sandbox works because malware needs to write to unauthorised parts of RAM or to the hard disk to install itself so that it can run again after a reboot. In Windows, this can only be done using a system call to the kernel's I/O functions, all of which check the privileges of the process calling them. Chrome's sandbox is set up so that write operations never have the correct privileges and therefore fail. Return codes are faked, so the malware believes it's installing itself, but never does.

For developers, Chrome's sandbox is particularly useful because it isn't deeply embedded in the browser. Developers can use it to test their own programs and make sure that they don't try to do anything they shouldn't, or which could be construed as malicious.

Chrome tarnished

Chrome's sandbox is among the most secure. In the first three years since the browser's release, it resisted all attempts at subversion during the prestigious Pwn2Own hacking competition. Held during the annual CanSecWest security conference, the competition has seen IE8 and Firefox hacked wide open. However, Chrome's sandbox may have been breached, if the claims of one French security company are true.

Researchers at VUPEN Security recently issued a security advisory giving details of what it claims is a simple, two-step process for breaking out of Chrome's sandbox and making unauthorised changes to the operating system. The news of Chrome's 'pwning' via its sandbox has been met with concern in the online security community, not least because VUPEN Security has chosen not to share its findings with Google, which would be more usual.

When a security researcher finds an exploitable bug, he or she usually contacts the developer with the details and perhaps a suggested fix. Only when the developer has implemented a fix and issued new code does the researcher exercise their bragging rights by publishing full details of the bug online.

However, in a statement, VUPEN Security says that, "We did not alert Google as we only share our vulnerability research with our Government customers for defensive and offensive security". This stance hints at the commercialisation of so-called 'zero day' exploits – those not reported to the developer so that they can be fixed but instead kept for private exploitation or sale.

At a time when governments are talking openly about their preparations for cyber warfare, exploitable bugs, packaged and ready to use with exploit code, can command serious money. However, several pundits have questioned VUPEN Security's announcement. If, they ask, VUPEN is planning to sell its Chrome exploit to a government customer to use as a weapon, why publicise it and put potential adversaries on their guard?

Take the blue pill

We take the idea of virtualisation for granted as a cheap or free path to creating networks on a single physical computer, but it is far from being a software-only technique. Since the mid 2000s, Intel and AMD have included hardware virtualisation inside their chips.

Both companies aimed to make the creation of virtual machine software easier, but their technologies had an unexpected side effect. When you create and run a virtual computer in a package like Oracle's free VirtualBox, for example, the entire simulation runs under the control of a process known as a hypervisor.

The hypervisor (which is also referred to as a virtual machine manager) makes sure that the entire physical computer is apparently available to the virtual machine. It handles access to everything from the BIOS to the USB ports, and resolves any resource access conflicts with other virtual machines it may be controlling at the same time.

However, not long after AMD and Intel released chips supporting virtualisation, Polish security guru Joanna Rutkowska created an ingenious hacking technique that ensures that people can see anything the chips are doing, including everything you type in.

For this, Rutkowska created a simple hypervisor that tells the processor to run under its control. However, the chip itself and the operating system that's running on it have no way of knowing that it has been flipped into this malicious hypervisor. They simply continue running as if nothing had happened.

Rutkowska called her approach the Blue Pill after the concept of the same name in cult sci-fi movie The Matrix. Running the Blue Pill exploit puts the chip into a simulation of the computer, which is indistinguishable from the real thing. Once inside this simulation, everything the running operating system does is laid bare.

Because the simulation is indistinguishable from the real thing, malware using the same concept (like a rootkit, for example) can be created that, potentially, cannot be detected. Other researchers have pointed out flaws in Rutkowska's approach, but there's no doubting that the sheer convenience of virtualisation may ultimately prove the downfall of current processor protection measures, and lead to ever more ingenious defence mechanisms.