English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

We claim that existing techniques and tools for generating and verifyingconstant-time code are incomplete, since they rely on assumptions that compileroptimization passes do not break constant-timeness or that certain operationsexecute in constant time on the hardware. We present the first end-to-endconstant-time-aware compilation process that preserves constant-time semanticsat every step from a high-level language down to microarchitectural guarantees,provided by the forthcoming ARM PSTATE.DIT feature. First, we present a newcompiler-verifier suite based on the JIT-style runtime Wasmtime, modified tocompile ct-wasm, a preexisting type-safe constant-time extension ofWebAssembly, into ARM machine code while maintaining the constant-time propertythroughout all optimization passes. The resulting machine code is then fed intoan automated verifier that requires no human intervention and uses staticdataflow analysis in Ghidra to check the constant-timeness of the output. Ourverifier leverages characteristics unique to ct-wasm-generated code in order tospeed up verification while preserving both soundness and wide applicability.We also consider the resistance of our compilation and verification againstspeculative timing leakages such as Spectre. Finally, in order to exposect-Wasmtime at a high level, we present a port of FaCT, a preexistingconstant-time-aware DSL, to target ct-wasm.

Constant-Time Wasmtime, for Real This Time: End-to-End Verified Zero-Overhead Constant-Time Programming for the Web and Beyond