Yuki Okushi ea1a0d76af Rollup merge of #111139 - fortanix:raoul/fix_mxcsr_configuration_dependent_timing, r=thomcc ... Fix MXCSR configuration dependent timing Dependent on the (potentially secret) data some vector instructions operate on, and the content in MXCSR, instruction retirement may be delayed by one cycle. This is a potential side channel. This PR fixes this vulnerability for the `x86_64-fortanix-unknown-sgx` platform by loading MXCSR with `0x1fbf` through an `xrstor` instruction when the enclave is entered and executing an `lfence` immediately after. Other changes of the MXCSR happen only when the enclave is about to be exited and no vector instructions will be executed before it will actually do so. Users of EDP who change the MXCSR and do wish to defend against this side channel, will need to implement the software mitigation described [here](https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/mxcsr-configuration-dependent-timing.html). cc: `@jethrogb` `@monokles`		2023-05-06 09:09:32 +09:00
..
benches
primitive_docs	Add primitive documentation to libcore	2021-09-12 02:23:08 +00:00
src	Rollup merge of #111139 - fortanix:raoul/fix_mxcsr_configuration_dependent_timing, r=thomcc	2023-05-06 09:09:32 +09:00
tests	Exclude SGX from create_dir_all_bare test	2023-02-21 18:33:20 +00:00
build.rs	socket ancillary data implementation for FreeBSD (from 13 and above).	2023-03-27 16:48:41 +01:00
Cargo.toml	Auto merge of #110562 - ComputerDruid:riscv, r=tmandry	2023-04-27 01:29:50 +00:00