What is Pointer authentication (PAC)?

Answer: B. A short authentication code is computed from the pointer value and a context value with a key inside the CPU, placed in the pointer's upper bits and checked before use

In the upper bits of a 64-bit pointer that are not used for the virtual address, an authentication code computed with a key inside the CPU from the pointer value and a context value (for example the stack pointer) is inserted. Just before a function's return address or similar is used, a dedicated instruction recomputes and compares it and, on a mismatch, turns the pointer into an unusable address, which makes attacks that overwrite return addresses on the stack (such as ROP) harder. Software cannot read the key, so an attacker cannot produce an authentication code that matches a modified pointer. However, the length of the code depends on settings such as the virtual address width and is often a dozen or so bits or fewer, so where many guesses are possible, the probability of a chance match has to be considered.