logoalt Hacker News

fosslinuxtoday at 1:03 PM1 replyview on HN

Although, there is ongoing research regarding time protection (https://trustworthy.systems/projects/timeprotection/) which prevents exactly timing channels. Including proofs of seL4 providing time protection.


Replies

broheetoday at 7:57 PM

Security-partition switches that carefully reset all shared micro-architectural state, while making switch times completely deterministic, and in particular, independent of previous execution history.

I'm afraid it means clearing all caches at each context switch. The performance penalty is really high.