google / safeside

Understand and mitigate software-observable side-channels
BSD 3-Clause "New" or "Revised" License
494 stars 54 forks source link

Would be nice to have examples written in managed languages #163

Open mikehearn opened 3 years ago

mikehearn commented 3 years ago

For example, an example of how to do a Spectre v4 attack in Java would be cool. I know it's possible in theory, but your current code relies on things (sandboxed) managed languages don't allow like custom assembly, which obscures how easy or hard it would be to implement. It'd also be nice to have a pre-canned attack to experiment with mitigations.