I think this paper presents an interesting overview of how to mitigate a subset of hw-related attack vectors. Seems really relevant.