Fiat Cryptography — The software that checks itself

--

As you may known, software is one of the most unreliable things in our modern world. Just imagine if your car stopped on the motorway with a blue screen, and then said, “Please reboot now!”. And, how do we really know how our software is going to react to every situation? Does our software ever validate its operation, in order to make sure it is working correctly? No!

And so a new paper from MIT outlines a method of implementing cryptography and which generates a proof of correctness [here]:

A core contribution is that it abstracts the method out — using high-level code — and does not use hand-crafted code, and then verifies the operation no matter the platform used. In the end they produce performance results that are on a par with most other implementations. Within the paper they implement the P-256 elliptic curve, and which has since been implemented with Chrome, Android, and CloudFlare. The C code for the implementation is here:

--

--

Prof Bill Buchanan OBE FRSE
ASecuritySite: When Bob Met Alice

Professor of Cryptography. Serial innovator. Believer in fairness, justice & freedom. Based in Edinburgh. Old World Breaker. New World Creator. Building trust.