And especially to Chris Brzuska, Aymeric Fromherz, Markulf Kohlweiss, Guido Martinez, Bryan Parno, and @protz.bsky.social: it was fun reflecting on the work and writing this paper together!

With huge thanks to the many contributors to this work, from @msftresearch.bsky.social, Inria, @cmu.edu, and several other institutions.

This was fantastic! Thanks for sharing

If you're building security-critical components in embedded systems, secure boot loaders, device attestation components, software bill of materials, etc.: Use our formally verified, high-performance code!

* and a verified implementation of DICE Protection Environment, using the CBOR profile

* a verified compiler for CDDL specifications, yielding either verified C or verified safe Rust code, for parsing and serializing CBOR objects according to a CDDL schema

* a verified implementation of COSE_Sign1, again in C or Rust, using verified cryptography from HACL*

Including:

* a formalization of multiple RFCs, with mechanically checked proofs of correctness and security.

* a library in verified C and in verified safe Rust for validating, parsing, and serializing CBOR objects

The paper includes a verified implementation of a task pool in the style of OCaml 5

#fstarlang #ocaml

PulseCore is the foundation for Pulse, an embedded language in F* for proof-oriented programming with dependent types & concurrent separation logic.

fstar-lang.org/tutorial/boo...

way too much shit around here

hahahahahaha

ok, ok, fine ... i should let my own grumpiness pass : )

Come on! Beautiful gentle yaanai v colonial demagogue??

A most gratifying recent moment was a sequence of puns related to knitting towards the end of Asterix in Corsica, which I had never picked up on, but kid (who knits) picked up on instantly and explained to me!

We read them all too, and obsessively re-read them, appreciating more of the puns & allusions each time. That too my old, battered versions of the albums from the 80s which my mom found : )