Citadel: Simple Spectre-Safe Isolation For Real-World Programs That Share Memory

Jules Drean, Miguel Gomez-Garcia, Fisher Jepsen +2

Transient execution side-channel attacks, such as Spectre, have been shown to break almost all isolation primitives. We introduce a new security property we call relaxed microarchi…