(timming leak of condition flags, POC for cortex-m85)
As they confirmed by mail: "You're correct, IT predicates are considered control flow (and absented from the guarantees provided by DIT)"
Affected should be mostly assembly implementations, as this is the area where one expects it to be constant time, unlike branch-more code, beloved by compilers.
(timming leak of condition flags, POC for cortex-m85)
As they confirmed by mail: "You're correct, IT predicates are considered control flow (and absented from the guarantees provided by DIT)"
Affected should be mostly assembly implementations, as this is the area where one expects it to be constant time, unlike branch-more code, beloved by compilers.
Happy auditing.