Some thoughts on Spectre and Meltdown
I'm gonna go and take issue with the claim that you were the first to come up with microarchitectural attacks, and that their story begins in 2004:<p>- Dan Page published [1] in 2002, describing an attack on DES exploiting cache timings. In 2003, he published [2] describing countermeasures to this class of attacks.<p>- Concurrently, a Japanese team also attacked DES (and MISTY1) with cache timing [3, 4].<p>- Dan Bernstein published the first version of his AES cache timing attack in late 2004 [5].<p>[1] <a href="https://eprint.iacr.org/2002/169" rel="nofollow">https://eprint.iacr.org/2002/169</a><p>[2] <a href="https://doi.org/10.1016/S1363-4127(03)00104-3" rel="nofollow">https://doi.org/10.1016/S1363-4127(03)00104-3</a><p>[3] <a href="https://link.springer.com/chapter/10.1007/978-3-540-45238-6_6" rel="nofollow">https://link.springer.com/chapter/10.1007/978-3-540-45238-6_...</a><p>[4] <a href="https://web.archive.org/web/20060906064630/http://web.engr.oregonstate.edu/~aciicmez/osutass/data/Tsunoo02.pdf" rel="nofollow">https://web.archive.org/web/20060906064630/http://web.engr.o...</a><p>[5] <a href="https://cr.yp.to/antiforgery/cachetiming-20041121.pdf" rel="nofollow">https://cr.yp.to/antiforgery/cachetiming-20041121.pdf</a>