Skip to content

Latest commit

 

History

110 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

TID — The Instant Destroyer

Independent security research in the field of protection against cache-based side-channel attacks.


Overview

TID is a specialized protocol designed to eliminate sensitive data remnants (such as cryptographic keys) from CPU cache layers ($L1, L2, \text{ and } L3$) immediately after use. It addresses a critical security gap where data persists in hardware structures even after being wiped from system memory (RAM).

Key Achievements

  • Verified Defense: Effectively mitigates Flush+Reload and similar microarchitectural side-channel attacks.
  • Measurable Performance: * Unprotected Access: ~78 CPU cycles (Cache Hit).
    • TID Protected Access: ~286 CPU cycles (Cache Miss).
    • Security Margin: Provides a 3.7x latency barrier, successfully blinding potential attackers.
  • Hardware-Level Precision: Utilizes optimized CPU instructions (CLFLUSHOPT, MFENCE) to ensure physical cache eviction.

Support the Research

TID is an independent security research project. Bare-metal hardware testing on high-end enterprise processors is resource-intensive and costly. By sponsoring this project, you directly support the infrastructure costs required for ongoing validation and security research.


Author & Identity


Documentation & License

  • Detailed research papers and technical execution reports are located in the /research folder.
  • This project is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0).

About

Hardware-level security protocol for mitigating cache-based side-channel attacks.

Topics

Resources

Stars

4 stars

Watchers

1 watching

Forks

Releases

Sponsor this project

Packages

Contributors

Languages