Poster: Entropy-Coupled CLFLUSH for Secure Cache Flushing Against Timing-Based Attacks

Read full text
Authors: Samiksha Verma, Virendra Singh
Cited by: 0

Abstract

Modern cache flush instructions, such as CLFLUSH, are essential for coherence and persistence but introduce deterministic timing behavior exploitable in attacks like Flush+Reload. We present Entropy-Coupled CLFLUSH (E-Flush), a secure redesign that integrates hardware entropy into the flush pipeline to randomize its latency and traversal order. By coupling each flush invocation with a unique entropy token, E-Flush eliminates observable timing patterns without affecting architectural correctness. Formal analysis proves zero timing leakage, and cycle-accurate simulation demonstrates less than 2.5% performance overhead. E-Flush thus provides a low-cost, backward-compatible defense against flush-based microarchitectural side channels.

Fields of Study & Subjects

Security and Verification in Computing Cryptographic Implementations and Security Parallel Computing and Optimization Techniques

Publication details

Journal / source
Proceedings of the Microarchitecture Security Conference
Publication date
3 February 2026