activity
20042026
most citedVerified Low-Level Programming Embedded in F*

112 citations · 159 across the 6 of their papers we have counts for

collaborators

8 papers

cs.CR2026

Scaling Verification of Cryptographic Software with Aeneas, Rust, and Lean

Son Ho, Cédric Fournet, Jonathan Protzenko +7

We develop a new methodology for verifying cryptographic software. We target production code written in Rust for performance and system integration, rather than verification conven…

cs.CR2022★ 3 cited

Confidential Machine Learning within Graphcore IPUs

Kapil Vaswani, Stavros Volos, Cédric Fournet +9

We present IPU Trusted Extensions (ITX), a set of experimental hardware extensions that enable trusted execution environments in Graphcore's AI accelerators. ITX enables the execut…

cs.MM2020★ 3 cited

AMP: Authentication of Media via Provenance

Paul England, Henrique S. Malvar, Eric Horvitz +16

Advances in graphics and machine learning have led to the general availability of easy-to-use tools for modifying and synthesizing media. The proliferation of these tools threatens…

cs.PL2017

Recalling a Witness: Foundations and Applications of Monotonic State

Danel Ahman, Cédric Fournet, Catalin Hritcu +3

We provide a way to ease the verification of programs whose state evolves monotonically. The main idea is that a property witnessed in a prior state can be soundly recalled in the…

cs.PL2017★ 23 cited

A Monadic Framework for Relational Verification: Applied to Information Security, Program Equivalence, and Optimizations

Niklas Grimm, Kenji Maillard, Cédric Fournet +7

Relational properties describe multiple runs of one or more programs. They characterize many useful notions of security, program refinement, and equivalence for programs with diver…

cs.PL2017★ 112 cited

Verified Low-Level Programming Embedded in F*

Jonathan Protzenko, Jean-Karim Zinzindohoué, Aseem Rastogi +8

We present Low*, a language for low-level programming and verification, and its application to high-assurance optimized cryptographic libraries. Low* is a shallow embedding of a sm…