[jleahy]

The fundamental mitigation is full memory encryption using a randomly generated key that changes each time the CPU boots. That exists for some CPUs.

[ATsch]

Well, that's not part of the ddr3 or ddr4 spec :)

[Spivak]

Where do you store the key?

[danielheath]

CPU registers - much harder to pull off and reattach elsewhere.