Hacker News new | ask | show | jobs
by delinka 4300 days ago
Why are there no suggestions to change processors accordingly? Intel should be considering changing the behavior of its encryption instructions to clear state when an operation is complete or at the request of software. Come to think of it, every CPU designer should be considering an instruction to clear the specified state (register set A, register set B) when requested by software. Then, the compiler can effectively support SECURE attributed variables, functions, or parameters without needing to stuff the pipleline with some kind of sanitizing code.
1 comments

You can clear the CPU state. But how is the CPU to know when it's safe to clear unless the software tells it?