Protecting cryptographic code against Spectre-RSB

This is the artifact for the paper "Protecting Cryptographic Code Against Spectre-RSB." It contains a Coq formalization of the approach presented in the paper, a version of the Jasmin compiler that protects programs against Spectre-RSB, a version of the Libjade crypto library protected against all known Spectre variants, and benchmarks for the updated version of Libjade. The main contributions in this artifact are a new SCT type system for Jasmin that checks for Spectre-RSB, the Coq formalization and proof of our approach, and high-assurance crypto implementations protected against all known Spectre variants.

To build the Coq formalization and the Jasmin compiler, we provide instructions using nix-shell. Additionally, we provide a Docker image with the Jasmin compiler already installed. To run the benchmarks, we provide standard Makefiles (that require the Jasmin compiler).

The result of building this artifact is high confidence on the security of our approach, and evidence of its overhead being minimal.