Original here, just run through Google Translate and fixed formatting.
Whitepaper: BranchScope: A New Side-ChannelAttack on Directional Branch Predictor
- I might update it (maybe I can not dig into anymore because the condition that can be attacked is too severe to think that it is usually impossible)