Side-channel protection cache lines shared by security domains

A non-transitory machine-readable storage medium, the non-transitory machine-readable storage medium storing instructions of a virtual machine monitor (VMM) that, if executed by a machine, are to cause the machine to perform operations, the operations including to:

• specify in address translation page tables that a side-channel protection is to be used for pages to be shared by a plurality of security domains;
• assign distinct security domain identifiers to the plurality of security domains;
• start a security domain of the plurality of security domains, including to store a security domain identifier corresponding to the security domain in a control and/or configuration register;
• and
• tear down the security domain, including to remove the security domain identifier from the control and/or configuration register, and update the address translation page tables to indicate that the pages are not to be shared by the security domain.