dc.contributor.author | Lau, Stella | |
dc.contributor.author | Bourgeat, Thomas | |
dc.contributor.author | Pit-Claudel, Cl?ment | |
dc.contributor.author | Chlipala, Adam | |
dc.date.accessioned | 2025-01-28T14:06:49Z | |
dc.date.available | 2025-01-28T14:06:49Z | |
dc.date.issued | 2024-12-02 | |
dc.identifier.isbn | 979-8-4007-0636-3 | |
dc.identifier.uri | https://hdl.handle.net/1721.1/158084 | |
dc.description | CCS ’24, October 14–18, 2024, Salt Lake City, UT, USA. | en_US |
dc.description.abstract | The process isolation enforceable by commodity hardware and operating systems is too weak to protect secrets from malicious code running on the same machine: attacks exploit timing side channels derived from contention on shared microarchitectural resources to extract secrets. With appropriate hardware support, however, we can construct isolated enclaves and safeguard independent processes from interference through timing side channels, a step towards confidentiality and integrity guarantees.
In this paper, we describe our work on formally specifying and verifying that a synthesizable hardware architecture implements strong timing isolation for enclaves. We reason about the cycle-accurate semantics of circuits with respect to a trustworthy formulation of strong isolation based on "air-gapped machines" and develop a modular proof strategy that sidesteps the need to prove functional correctness of processors. We apply our method on a synthesizable, multicore, pipelined RISC-V design formalized in Coq. | en_US |
dc.publisher | ACM|Proceedings of the 2024 ACM SIGSAC Conference on Computer and Communications Security | en_US |
dc.relation.isversionof | https://doi.org/10.1145/3658644.3690203 | en_US |
dc.rights | Creative Commons Attribution | en_US |
dc.rights.uri | https://creativecommons.org/licenses/by/4.0/ | en_US |
dc.source | Association for Computing Machinery | en_US |
dc.title | Specification and Verification of Strong Timing Isolation of Hardware Enclaves | en_US |
dc.type | Article | en_US |
dc.identifier.citation | Lau, Stella, Bourgeat, Thomas, Pit-Claudel, Cl?ment and Chlipala, Adam. 2024. "Specification and Verification of Strong Timing Isolation of Hardware Enclaves." | |
dc.contributor.department | Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science | en_US |
dc.identifier.mitlicense | PUBLISHER_CC | |
dc.eprint.version | Final published version | en_US |
dc.type.uri | http://purl.org/eprint/type/ConferencePaper | en_US |
eprint.status | http://purl.org/eprint/status/NonPeerReviewed | en_US |
dc.date.updated | 2025-01-01T08:49:07Z | |
dc.language.rfc3066 | en | |
dc.rights.holder | The author(s) | |
dspace.date.submission | 2025-01-01T08:49:07Z | |
mit.license | PUBLISHER_CC | |
mit.metadata.status | Authority Work and Publication Information Needed | en_US |