Hardware Security

Which is NOT used as a countermeasure to speculative-execution vulnerabilities such as Spectre?

  1. AInserting barrier instructions that stop speculation after dangerous branches
  2. BRaising the CPU clock frequency
  3. CMasking array indices into range so out-of-bounds data cannot be read speculatively
Show answer and explanation

Answer: B. Raising the CPU clock frequency

Countermeasures to Spectre include inserting instructions that halt speculation after conditional branches (such as x86 lfence), masking indices so out-of-range data cannot be read, coding patterns that prevent abuse of indirect branch prediction (such as retpoline) and CPU microcode updates that control predictors. Disabling all speculation would cripple performance, so these measures are usually applied only at dangerous locations.

  • A. This is a real countermeasure.
  • B. Correct. Frequency is unrelated to speculation.
  • C. This is a real countermeasure.
Practice this topic Back to topic

More Hardware Security questions

  1. Which statement about countermeasures to speculative-execution vulnerabilities is generally correct?
  2. Among power analysis attacks on chips performing cryptography, what characterizes differential power analysis (DPA)?
  3. What is the idea behind masking, a countermeasure against power analysis?
  4. What characterizes electromagnetic side-channel analysis?
  5. Which describes a fault injection attack?