Memory safety bugs continue to be a major source of security vulnerabilities in our critical
infrastructure. The CHERI project has proposed extending conventional architectures with …

Capability machines are a type of CPUs that support fine-grained privilege separation using
capabilities, machine words that include forms of authority. Formal models of capability …

Undefined behavior in C often causes devastating security vulnerabilities. One practical
mitigation is compartmentalization, which allows developers to structure large programs into …

We introduce SCIO*, a formally secure compilation framework for statically verified programs
performing input-output (IO). The source language is an F* subset in which a verified …

A capability machine is a type of CPU allowing fine-grained privilege separation using
capabilities, machine words that represent certain kinds of authority. We present a …

Proving secure compilation of partial programs typically requires back-translating an attack
against the compiled program to an attack against the source program. To prove back …

The most prominent formal criterion for secure compilation is full abstraction, the
preservation and reflection of contextual equivalence. Recent work introduced robust …

Trusted Execution Environments (TEE) are ubiq-uitous. They form the highest privileged
software component of the platform with full access to the system and associated devices …

To ensure that secure applications do not leak their secrets, they are required to uphold
several security properties such as spatial and temporal memory safety as well as …

This paper discusses the relationship between two frameworks: universal composability
(UC) and robust compilation (RC). In cryptography, UC is a framework for the specification …