plenty of applications would be just fine with a 5x slowdown vs state of the art CPUs and could desperately use the security improvement. Other than the tempor

plenty of applications would be just fine with a 5x slowdown vs state of the art CPUs and could desperately use the security improvement. Other than the temporal safety overheads-- which you could skil and still have spatial safety worth using-- the worst CHERI does is increase the memory bandwidth for pointers, so in a pathological case you might imagine a 2x slowdown. In some cases it could make things faster and simpler though, since the CHERI approach can get process isolation without a MMU or TLB, so those overheads could be reduced or eliminated. > Also, it confuses any code that assumes you can convert a pointer to a long (or long long) and back such code is already pretty unportable on existing systems. You can't implement an xor linked list on CHERI (at least not in the pure mode)... hardly seems like much of a loss. :)