suggestions of benchmark programs for experimentation

[monperrus]

since #1 is closed (it feels good to have the first issue closed :), here is a thread to share ideas about potential programs to analyze.

[monperrus]

Big crypto in WASM (that's the one behind Whatsapp): https://github.com/nazar-pc/noise-c.wasm see also Noise Protocol

[Jacarte]

Now we have the full C corpus from Rosetta. Up to 790 valid programs from a total of 996.

[monperrus]

congrats, that's good.

[Jacarte]

Report for the SLUMPs execution over the Rosetta corpus can be accessed here.

Experiment setup:

• 1h timeout per program

[Jacarte]

SafeSide is a project to understand and mitigate software-observable side-channels: information leaks between software domains caused by implementation details outside the software abstraction.

Unlike other side-channel attacks -- e.g. measuring power use or electromagnetic emissions -- software-observable side-channels don't require physical access or proximity.

Our early focus is on transient execution attacks and leaks from software cryptography implementations

[Jacarte]

SafeSide is a project to understand and mitigate software-observable side-channels: information leaks between software domains caused by implementation details outside the software abstraction.

Unlike other side-channel attacks -- e.g. measuring power use or electromagnetic emissions -- software-observable side-channels don't require physical access or proximity.

Our early focus is on transient execution attacks and leaks from software cryptography implementations.

https://github.com/google/safeside