Re:Keeping Memory Contents Secret
by saagarjha on Monday November 25, 2019 @04:15AM
(#21626571)
You'd have to find a way to pin the keys in the registers, lest they be put in RAM during a context switch.
[ Parent
| on HN ]
Re:Keeping Memory Contents Secret
by tom_mellior on Monday November 25, 2019 @05:41AM
(#21626924)
That's OK if your threat model trusts the kernel and only wants to protect against speculative execution attacks within the application itself. While the application is running, they keys will only ever be accessed from registers -- context switches are transparent to the application.
Yes, but there are debug registers that can be used for this.