Unlike SGX, Sanctum isolates each enclave's data throughout the system's cache
hierarchy. The security monitor flushes per-core caches, such as the L1 cache
and the TLB, whenever a core jumps between enclave and non-enclave code.
\textit{Last-level cache} (LLC) isolation is achieved by a simple partitioning
scheme supported by Sanctum's hardware extensions
(\S~\ref{sec:dram_regions}).

Sanctum's isolation is also stronger than SGX's with respect to fault handling.
While SGX sanitizes the information that an OS receives during a fault, Sanctum
achieves full isolation by having the security monitor route the faults that
occur inside an enclave to that enclave's fault handler. This removes
all information leaks via the fault timing channel.
