Type checking cryptography implementations

• Author(s): Barbosa, Manuel Bernardo ; Page, D. ; Moss, Andrew ; Rodrigues, Nuno F. ; Silva, Paulo
• Date: 2012
• Persistent ID: http://hdl.handle.net/1822/14822
• Origin: RepositóriUM - Universidade do Minho
• Subject(s): Cryptography; Programming language
• Document Type: Article
• Language: English

Description

Proceedings da conferência Fundamentals of Software Engineering 2011 Cryptographic software development is a challenging field: high performance must be achieved, while ensuring correctness and compliance with low-level security policies. CAO is a domain specific language designed to assist development of cryptographic software. An important feature of this language is the design of a novel type system introducing native types such as predefined sized vectors, matrices and bit strings, residue classes modulo an integer, finite fields and finite field extensions, allowing for extensive static validation of source code. We present the formalisation, validation and implementation of this type system.