> but what crypto scheme can perform encryption of a signature both securely and fast enough XOR, I assume. https://pure.tugraz.at/ws/portalfiles/portal/37604

> but what crypto scheme can perform encryption of a signature both securely and fast enough XOR, I assume. https://pure.tugraz.at/ws/portalfiles/portal/37604654/ind_branch_faults_pa_2021_nasahl_host.pdf https://pure.tugraz.at/ws/portalfiles/portal/37604654/ind_br... > On average, encoding addresses and verifying them at each indirect branch using the dedicated blraaz and braaz instructions yields a performance overhead of 1.50%. The protection of the link between indirect control-flow transfers induces a runtime overhead of 0.83% on average. For the combination of both protection mechanism, we measured an average performance overhead of 2.34%.