#GoogleProjectZero: MTE (ARM Memory Tagging Extensions) As Implemented

  • Intro
  • Part 1: Implementation Testing. An objective summary of the tests performed, and some basic analysis. If you're interested in implementing a mitigation based on MTE, you should read this document first as it will give you more detailed technical background.
  • Part 2: Mitigation Case Studies. A subjective assessment of the impact of various mitigation approaches based on the use of MTE in various user-mode contexts, based on our experiences during the tests performed in Part 1. If you're not interested in implementing a mitigation based on MTE, but you are interested in the limits of how effective such a mitigation might be, you can skip Part 1 and start here.
  • Part 3: The Kernel. A subjective assessment of the additional issues faced in using MTE for a kernel-mode mitigation.

#security #arm #mte #cpp