Hi. L3 caches are indeed huge these days. For example, the latest Mac Pros are shipping with 30MB L3 caches. You can do a lot with that space. My company Priva

Hi. L3 caches are indeed huge these days. For example, the latest Mac Pros are shipping with 30MB L3 caches. You can do a lot with that space. My company PrivateCore runs an entire Linux/KVM stack within the L3 cache, then fully encrypts main memory. Someone physically acquiring memory would only obtain plaintext. Note that a software compromise could still read memory. That's one reason why it's necessary to fully attest a system before provisioning it with any keys or passwords. Here's a CanSecWest talk with more details: http://cansecwest.com/slides/2013/PrivateCore%20CSW%202013.pdf http://cansecwest.com/slides/2013/PrivateCore%20CSW%202013.p...