TikTag: Breaking ARM's memory tagging extension with speculative execution (arxiv.org)