Publicação

CAOVerif: an open-source deductive verification platform for cryptographic software implementations

Ver documento

Detalhes bibliográficos
Resumo:CAO is a domain-specific imperative language for cryptography, offering a rich mathematical type system and crypto-oriented language constructions. We describe the design and implementation of a deductive verification platform for CAO and demonstrate that the development time of such a complex verification tool could be greatly reduced by building on the Jessie plug-in included in the Frama-C framework. We discuss the interesting challenges raised by the domain-specific characteristics of CAO, and describe how we tackle these problems in our design. We base our presentation on real-world examples of CAO code, extracted from the open-source code of the NaCl cryptographic library, and illustrate how various cryptography-relevant security properties can be verified.
Autores principais:Almeida, José Bacelar
Outros Autores:Barbosa, Manuel; Filliâtre, Jean-Christophe; Pinto, Jorge Sousa; Vieira, Bárbara Isabel Sousa
Assunto:Formal verification Program verification Cryptographic software Deductive verification Engenharia e Tecnologia::Engenharia Eletrotécnica, Eletrónica e Informática Ciências Naturais::Ciências da Computação e da Informação
Ano:2014
País:Portugal
Tipo de documento:artigo
Tipo de acesso:acesso aberto
Instituição associada:Universidade do Minho
Idioma:inglês
Origem:RepositóriUM - Universidade do Minho

Registos relacionados

Registos relacionados