Binsec/Rel: Symbolic Binary Analyzer for Security with Applications to Constant-Time and Secret-Erasure. (arXiv:2209.01129v1 [cs.CR])

This paper tackles the problem of designing efficient binary-level
verification for a subset of information flow properties encompassing
constant-time and secret-erasure. These properties are crucial for
cryptographic implementations, but are generally not preserved by compilers.
Our proposal builds on relational symbolic execution enhanced with new
optimizations dedicated to information flow and binary-level analysis, yielding
a dramatic improvement over prior work based on symbolic execution. We
implement a prototype, Binsec/Rel, for bug-finding and bounded-verification of
constant-time and secret-erasure, and perform extensive …

applications binary secret security