A Resilient Class of Speculative Attacks Can Leak ARM Memory Tags

This article introduces two new microarchitectural gadgets, TIKTAG-v1 and TIKTAG-v2, that leak ARM MTE tags by exploiting speculative execution, data prefetching, and store-to-load forwarding behaviors.