Citadel: Simple Spectre-Safe Isolation For Real-World Programs That Share Memory
Jules Drean, Miguel Gomez-Garcia, Fisher Jepsen, Thomas Bourgeat,, Srinivas Devadas

TL;DR
Citadel introduces a practical microarchitectural isolation technique that mitigates Spectre-like attacks by restricting speculative execution, enabling secure sharing of memory with minimal performance overhead.
Contribution
The paper presents a novel approach called relaxed microarchitectural isolation (RMI) that enforces speculative security, implemented through hardware mechanisms and two defense modes, Safe and Burst.
Findings
Less than 5% performance overhead in prototype
Effective mitigation of Spectre-like attacks
Supports secure cryptographic and inference applications
Abstract
Transient execution side-channel attacks, such as Spectre, have been shown to break almost all isolation primitives. We introduce a new security property we call relaxed microarchitectural isolation (RMI) that allows sensitive programs that are not-constant-time to share memory with an attacker while restricting the information leakage to that of non-speculative execution. Although this type of speculative security property is typically challenging to enforce, we show that we can leverage the enclave setup to achieve it. In particular, we use microarchitectural isolation to restrict attacker's observations in conjunction with straightforward hardware mechanisms to limit speculation. This new design point presents a compelling trade-off between security, usability, and performance, making it possible to efficiently enforce RMI for any program. We demonstrate our approach by implementing…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSecurity and Verification in Computing · Physical Unclonable Functions (PUFs) and Hardware Security · Advanced Memory and Neural Computing
