Leaky Address Masking: Exploiting Unmasked Spectre Gadgets with Noncanonical Address Translation.

Math Hertogh, Sander Wiebing, Cristiano Giuffrida

Browse the full SP paper archive.