SSH gets protection against side-channel attacks
I've looked at it. There's still a spectre window of opportunity to get the shielded private host keys.<p>sshkey_shield_private => explicit_bzero() 
openbsd-compat/freezero.c<p><a href="https://github.com/openssh/openssh-portable/commit/4f7a56d5e02e3d04ab69eac1213817a7536d0562" rel="nofollow">https://github.com/openssh/openssh-portable/commit/4f7a56d5e...</a><p>It's only using the insecure freezero, which is using the insecure explicit_bzero. A simple compiler barrier only, no memory barrier. so it's unsafe against the advertised spectre/meltdown sidechannel attacks, the secrets are still in the caches.