Skip to content

Latest commit

 

History

History
15 lines (12 loc) · 612 Bytes

README.md

File metadata and controls

15 lines (12 loc) · 612 Bytes

sprectre-rust-poc

Spectre PoC in Rust

The PoC is a basic implementation of send->receive through a cache side-channel. It may be a full SpectreV2 implementation in the future - if I find a good BTI gadget to abuse. The current limitation is that no indirect call has the secret byte in a register prior to execution.

Prerequisites

$rustc -V
rustc 1.46.0-nightly (feb3536eb 2020-06-09)

Resources

Rust Inline ASM RFC
Rust Inline ASM blog post