Practical Formal Methods for Real World Cryptography - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2019

Practical Formal Methods for Real World Cryptography

Karthikeyan Bhargavan
Prasad Naldurg
  • Fonction : Auteur
  • PersonId : 1062019

Résumé

Cryptographic algorithms, protocols, and applications are difficult to implement correctly, and errors and vulnerabilities in their code can remain undiscovered for long periods before they are exploited. Even highly-regarded cryptographic libraries suffer from bugs like buffer overruns, incorrect numerical computations, and timing side-channels, which can lead to the exposure of sensitive data and longterm secrets. We describe a tool chain and framework based on the the F * programming language to formally specify, verify and compile high-performance cryptographic software that is secure by design. This tool chain has been used to build a verified cryptographic library called HACL * , and provably secure implementations of sophisticated secure communication protocols like TLS and Signal. We describe these case studies and conclude with ongoing work on using our framework to build verified implementations of privacy preserving machine learning systems.
Fichier principal
Vignette du fichier
pfm-rwc.pdf (863.36 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03465950 , version 1 (04-12-2021)

Identifiants

  • HAL Id : hal-03465950 , version 1

Citer

Karthikeyan Bhargavan, Prasad Naldurg. Practical Formal Methods for Real World Cryptography. 39th IARCS Annual Conference on Foundations of Software Technology and Theoretical Computer Science, Dec 2019, Mumbai, India. ⟨hal-03465950⟩
55 Consultations
192 Téléchargements

Partager

Gmail Facebook X LinkedIn More