if an attacker can arrange that the speculatively executed code (which may be directly written by the attacker, or may be a suitable "gadget" that they have found in the targeted system) operates on secret data that they are unauthorized to access, and has a different effect on the cache for different values of the secret data, they may be able to discover the value of the secret data.