Core engineering and protocols for Multi-Tenant Cloud Hardening.
Simultaneous Multithreading (SMT) allows two threads to share execution units, port arbiters, and L1 caches. A malicious thread sharing a physical core with an ML-KEM decapsulation process can measure execution port contention to deduce secret key properties. MLKEMSec configures Linux cgroups and scheduler policies to prohibit SMT co-location for cryptographic worker processes.
Using Intel Resource Director Technology (RDT), we partition the L3 cache into private bitmasks. Cryptographic processes operate within dedicated cache ways that cannot be evicted or probed by other cloud workloads, effectively immunizing the system against cross-core side-channel surveillance.