SDDT models skipped bitwise ops in bitslice ciphers, then uses that to key-recover PIPO with fewer faults.

Can gem5 do guided RISC-V fault injection? InjectV says yes, for registers, memory, and FISSC benchmarks.