This is a collection of Intel®’ IA32® Software Developer's Manuals (URL of the day) and AMD' AMD64 Architecture Programmer's Manual together with the related specifications, application notes, white papers, and change logs. The collection aims to keep all available revisions. It was originally created by Michal Necasek, see OS/2 Museum.

If you have a public document, related to the IA32® specifications and missing from the collection, please mail it to me. The content of this URL and all sub-ULRs is available for convenient bulk download by rsync x86docs password "" (empty).

BRAA, BRAAZ, BRAB, BRABZ -- A64

BRAA, BRAAZ, BRAB, BRABZ

Branch to register, with pointer authentication

This instruction authenticates the address in the general-purpose register that is specified by <Xn>, using a modifier and the specified key, and branches to the authenticated address.

The modifier is:

Key A is used for BRAA and BRAAZ. Key B is used for BRAB and BRABZ.

If the authentication passes, the PE continues execution at the target of the branch. For information on behavior if the authentication fails, see Faulting on pointer authentication.

The authenticated address is not written back to the general-purpose register.

This instruction provides a hint that this is not a subroutine call or return.

Integer
(FEAT_PAuth)

313029282726252423222120191817161514131211109876543210
1101011Z0001111100001MRnRm
opop2A

Encoding for the Key A, register modifier variant

Applies when (Z == 1 && M == 0)

BRAA <Xn>, <Xm|SP>

Encoding for the Key A, zero modifier variant

Applies when (Z == 0 && M == 0 && Rm == 11111)

BRAAZ <Xn>

Encoding for the Key B, register modifier variant

Applies when (Z == 1 && M == 1)

BRAB <Xn>, <Xm|SP>

Encoding for the Key B, zero modifier variant

Applies when (Z == 0 && M == 1 && Rm == 11111)

BRABZ <Xn>

Decode for all variants of this encoding

if !IsFeatureImplemented(FEAT_PAuth) then EndOfDecode(Decode_UNDEF); end; if Z == '0' && Rm != '11111' then EndOfDecode(Decode_UNDEF); end; let n : integer{} = UInt(Rn); let m : integer{} = UInt(Rm); let use_key_a : boolean = (M == '0'); let source_is_sp : boolean = ((Z == '1') && (m == 31)); let auth_then_branch : boolean = TRUE;

Assembler Symbols

<Xn>

Is the 64-bit name of the general-purpose register holding the address to be branched to, encoded in the "Rn" field.

<Xm|SP>

Is the 64-bit name of the general-purpose source register or stack pointer holding the modifier, encoded in the "Rm" field.

Operation

var target : bits(64) = X{}(n); let modifier : bits(64) = if source_is_sp then SP{64}() else X{64}(m); if use_key_a then target = AuthIA(target, modifier, auth_then_branch); else target = AuthIB(target, modifier, auth_then_branch); end; // Value in BTypeNext will be used to set PSTATE.BTYPE if InGuardedPage then if n == 16 || n == 17 then BTypeNext = '01'; else BTypeNext = '11'; end; else BTypeNext = '01'; end; let branch_conditional : boolean = FALSE; BranchTo{64}(target, BranchType_INDIR, branch_conditional);


2026-03_rel 2026-03-26 20:48:11

Copyright © 2010-2026 Arm Limited or its affiliates. All rights reserved. This document is Non-Confidential.