Fact [pdf]

(ranjitjhala.github.io)

9 points | by nature556 4 days ago ago

4 comments

  • cadamsau an hour ago

    Looks to be from 2019 also?

  • nature556 4 days ago

    Abstract Real-world cryptographic code is often written in a subset of C intended to execute in constant-time, thereby avoiding timing side channel vulnerabilities. This C subset eschews structured programming as we know it: if-statements, looping constructs, and procedural abstractions can leak timing information when handling sensitive data. The resulting obfuscation has led to subtle bug

    • gryfft 4 days ago

      Since it appears you have chosen to incompletely quote the problem statement from the abstract as your submission statement, and since by accident or design the full title was not included in your submission:

      This paper describes FaCT, a DSL for timing-sensitive computation. It is described as allowing readable, high-level cryptographic code, with efficient, constant-time behavior.

      At a very rough skim, the language seems to have interesting conveniences around implementing mitigations to timing channel attacks, like marking particular values 'secret' for the compiler.

  • adamrezich 2 hours ago

    Submission title should probably be updated to reflect the full title:

    FaCT: A DSL for Timing-Sensitive Computation [pdf]