eprint.iacr.orgpaperAnalyzing Compiler-induced Constant-time Violations with Compiler at Scale
CTGREP is a compiler-based framework that applies differential analysis across the whole Clang/LLVM compilation chain to find where, how and under which configurations compiler optimizations break constant-time cryptographic code. Applied to seven libraries, three Clang versions, six targets and thousands of configurations, it led to 48 cases fixed with developers. It also identified seven new problematic LLVM passes and bypassed existing compiler-flag mitigations.
TL;DR Presents CTGREP, which finds compiler-induced constant-time violations in seven crypto libraries by differential analysis across the compilation chain.
Organisations named here
- constant-time violations
- CTGREP
- timing side-channel
Technologies named here
- Clang and LLVM
- LLVM passes
- Compiler-flag-based mitigation
- clang
- LLVM
Techniques named here
- Differential analysis
Related in Hardware & RF
eprint.iacr.orgpaperHAETAE on a Diet: Less Stack, Less Time on Low-End Microcontrollers
github.comrepogeo-tp/ESP32-Bit-Pirate
github.comrepo