CT-wasm: type-driven secure cryptography for the web ecosystem
@article{Watt2019CTwasmTS, title={CT-wasm: type-driven secure cryptography for the web ecosystem}, author={C. Watt and John Renner and Natalie Popescu and S. Cauligi and D. Stefan}, journal={Proceedings of the ACM on Programming Languages}, year={2019}, volume={3}, pages={1 - 29} }
A significant amount of both client and server-side cryptography is implemented in JavaScript. Despite widespread concerns about its security, no other language has been able to match the convenience that comes from its ubiquitous support on the "web ecosystem" - the wide variety of technologies that collectively underpins the modern World Wide Web. With the introduction of the new WebAssembly bytecode language (Wasm) into the web ecosystem, we have a unique opportunity to advance a principled… CONTINUE READING
21 Citations
Formally Verified Cryptographic Web Applications in WebAssembly
- Computer Science
- 2019 IEEE Symposium on Security and Privacy (SP)
- 2019
- 11
- PDF
Everything Old is New Again: Binary Security of WebAssembly
- Computer Science
- USENIX Security Symposium
- 2020
- 4
- PDF
System-Level Non-interference of Constant-Time Cryptography. Part II: Verified Static Analysis and Stealth Memory
- Computer Science
- Journal of Automated Reasoning
- 2020
Compositional Information Flow Analysis for WebAssembly Programs
- Computer Science
- 2020 IEEE 20th International Working Conference on Source Code Analysis and Manipulation (SCAM)
- 2020
- PDF
IODINE: Verifying Constant-Time Execution of Hardware
- Computer Science
- USENIX Security Symposium
- 2019
- 6
- PDF
CapablePtrs: Securely Compiling Partial Programs using the Pointers-as-Capabilities Principle
- Computer Science
- ArXiv
- 2020
- PDF
Using Information Flow to Design an ISA that Controls Timing Channels
- Computer Science
- 2019 IEEE 32nd Computer Security Foundations Symposium (CSF)
- 2019
- 7
- PDF
References
SHOWING 1-6 OF 6 REFERENCES
Verifiable side-channel security of cryptographic implementations: constant-time MEE-CBC
- Computer Science
- IACR Cryptol. ePrint Arch.
- 2015
- 49
- Highly Influential
- PDF
System-level Non-interference for Constant-time Cryptography
- Computer Science
- IACR Cryptol. ePrint Arch.
- 2014
- 84
- Highly Influential
- PDF
CT-wasm: type-driven secure cryptography for the web ecosystem
- Computer Science
- 2019
- 1
- Highly Influential
HACL*: A verified
- 2017
Verifying ConstantTime Implementations
- Proceedings of the USENIX Security Symposium. USENIX Association.
- 2016