Navid Rahimi via llvm-dev
2020-Mar-25 20:29 UTC
[llvm-dev] [GSoC] LLVM IR Constant timeness notion
Hi all,
Recently there has been some discussion and problems constant
timeliness notion in LLVM IR [1]. As you may already know, LLVM IR, nor
have, nor support any notion for cryptographic constant timeliness of
optimizations in LLVM. There has been some research regarding secure code
optimization [3, 5] and it is *kind of* possible to detect and test it
easily [2]. I was thinking it is a good idea to propose this as the Google
Summer of Code project? and who code mentor me regarding this project?
There has been some primitive implementation for this [6]. But it is
nowhere near useable in real world, and needs a lot of improvement.
1) https://bugs.llvm.org/show_bug.cgi?id=42901
2) Reparaz, Oscar, Josep Balasch, and Ingrid Verbauwhede. "Dude, is my code
constant time?." Design, Automation & Test in Europe Conference &
Exhibition (DATE), 2017. IEEE, 2017.
3) Almeida, José Bacelar, et al. "Verifying constant-time
implementations."
25th {USENIX} Security Symposium ({USENIX} Security 16). 2016.
4) Simon, Laurent, David Chisnall, and Ross Anderson. "What you get is what
you C: Controlling side effects in mainstream C compilers." 2018 IEEE
European Symposium on Security and Privacy (EuroS&P). IEEE, 2018.
5) Vu, Son Tuan, et al. "Secure delivery of program properties through
optimizing compilation." Proceedings of the 29th International Conference
on Compiler Construction. 2020.
6) https://github.com/lmrs2/ct_choose
best wishes,
Regards.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.llvm.org/pipermail/llvm-dev/attachments/20200325/9be43579/attachment.html>