From e985afe0e16f4e1f0d178476342de10bce5d2c0c Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Tue, 23 Oct 2018 19:38:00 -0400 Subject: [PATCH] document relatively high performance cost of MPK --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index c8447eb..ce77f23 100644 --- a/README.md +++ b/README.md @@ -67,7 +67,9 @@ The available configuration options are the following: * `CONFIG_SEAL_METADATA`: `true` or `false` (default) to control whether Memory Protection Keys are used to disable access to all writable allocator state outside of the memory allocator code. It's currently disabled by default due - to being extremely experimental and needing some minor optimization work. + to being extremely experimental and a significant performance cost for this + use case on current generation hardware, which may become drastically lower + in the future. Compile-time configuration is available in the `config.h` file for controlling the balance between security and performance / memory usage. By default, all