News for hackers. Stuff that matters.
Re:SSH gets protection against side-channel attacks by the8472 on Friday June 21, 2019 @04:43PM (#20246171)
Per-process keys aren't really possible because memory can change process ownership (vmsplice) or be shared across processes (fork, page cache, memfd). It might be possible for pages marked MADV_DONTFORK

Additionally a per-process key does not help against spectre style attacks where you would trick the process into speculating on protected memory.

There are no comments on this comment yet.