undefined | Better HN

0 pointsAccujack4y ago0 comments

Performance is what I wonder about. The idea sounds good, but what crypto scheme can perform encryption of a signature both securely and fast enough to keep up with every pointer pushed on the stack?

What's the trade-off?

0 comments

3 comments · 1 top-level

staticassertion4y ago· 2 in thread

> but what crypto scheme can perform encryption of a signature both securely and fast enough

XOR, I assume.

https://pure.tugraz.at/ws/portalfiles/portal/37604654/ind_br...

> On average, encoding addresses and verifying them at each indirect branch using the dedicated blraaz and braaz instructions yields a performance overhead of 1.50%. The protection of the link between indirect control-flow transfers induces a runtime overhead of 0.83% on average. For the combination of both protection mechanism, we measured an average performance overhead of 2.34%.

my1234y ago

https://eprint.iacr.org/2016/444.pdf is the cipher used for pointer auth on Arm-designed cores.

staticassertion4y ago

Wonderful, thank you.

j / k navigate · click thread line to collapse