[Cryptography] Speculation considered harmful?

[Tom Mitchell]

On Mon, Jan 8, 2018 at 8:58 PM, Nico Williams <nico at cryptonector.com> wrote:

> On Mon, Jan 08, 2018 at 06:35:36AM -0500, John Levine wrote:
> > In article <7f4174cb-b842-1314-587a-dd32711a81bf at symas.com> you write:
> > >> One of them is VLIW, or "Very Long Instruction Word,"
>
...

> > >
> > >Intel EPIC -> Itanium -> nobody liked that path.
>
....

> Provided it doesn't speculate behind the compiler's back, you could just
> disable speculation by having the compiler emit slower, more sequential
> code.
>

An attacker is not constrained by the graces of the compiler doing the
correct things.  An attacker would be happy to edit a binary to do bad
things.
A well behaved user community sure.
Multiple compiler vendors  ???



-- 
  T o m    M i t c h e l l
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20180109/f7f70569/attachment.html>