>It is, however, possible to repair Spectre vulnerability without any performance overhead. In particular, oo7 quantifies the leakage (cf. Section 4.2.5) to inv

>It is, however, possible to repair Spectre vulnerability without any performance overhead. In particular, oo7 quantifies the leakage (cf. Section 4.2.5) to investigate the range of memory touched by an attacker. Maybe I missed it but how much padding is needed? Depending on how much, surely that isn't too bad of a compromise? Also wouldn't you have to randomise the amount of padding needed? For the other methods the ~2% figure in performance loss also seems pretty decent.