a compiler and verifier for .
Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems