Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing · HackerPapers discussionshttps://hackerpaper.kaipfister.de/p/1611.06952/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:16:22 GMTInferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing — mentioned by pritambaralhttps://news.ycombinator.com/item?id=16073525urn:hackerpapers:mention:1611.06952:16073525Thu, 04 Jan 2018 20:00:42 GMT<p>Maybe, maybe not. I looked around a bit and found [1]&quot;that the Intel SGX does not clear branch history when switching from enclave mode to non-enclave mode&quot;, which suggests either that the SGX designers were unaware of the dangers of not separating branch prediction between privilege levels, or that Intel intentionally weakened SGX so as to not reveal the similar flaw in their ring0/ring3 separation. 1: https://arxiv.org/abs/1611.06952 (Nov &#x27;16)</p><p><a href="https://hackerpaper.kaipfister.de/p/1611.06952/">Paper and discussion history</a>. A mention is not an endorsement.</p>cs.CR