A Little Less Speculation, a Little More Action - A Deep Dive into Fuchsia's Mitigations for Specific CPU Side-Channel Attacks

Dive into a comprehensive 40-minute Black Hat conference talk exploring Fuchsia's approach to mitigating CPU side-channel attacks. Gain insights into how the Fuchsia team at Google tackled the challenge of understanding and implementing protections against various side-channel vulnerabilities in their new open-source operating system. Learn about the process of enumerating existing CPU side-channels, studying mitigations in well-known operating systems, and applying these safeguards to Fuchsia across x86 and ARM processors. Discover the team's strategies for handling user, kernel, and hypervisor attacks, as well as their methods for testing and maintaining the effectiveness of these mitigations. Explore specific topics including Meltdown, Indirect Branch Predictor, Retpill, Indirect Branch Prediction Barrier, Indirect Branch Restricted Speculation, Enhanced IBRs, L1 Terminal Fault, MDS Mitigation, and Spectre Variant 1.

Introduction
Meltdown
Indirect Branch Predictor
Retpill
Indirect Branch Prediction Barrier
Indirect Branch Restricted Speculation
Enhanced IBRs
L1 Terminal Fault
L1 Terminal Fault Mitigation
MDS Mitigation
Spectre Variant 1
Bounce Check