FreeSBee: A Constant-Time Compilation Pipeline
FreeSBee hardens compiler output against timing side channels using taint analysis and control-flow transforms.
FreeSBee is a compilation workflow intended to reduce timing side-channel leakage, especially on IoT devices. It uses taint analysis to locate code dependent on sensitive data, then applies automated control-flow transformations in the compiler. The authors evaluate a realistic application on a RISC-V core with static timing analysis and statistical tests. They do not achieve cycle-accurate constant-time execution, but report that the hardened binary appears safe against timing attacks in their statistical results.
- Taint analysis finds code that depends on sensitive data.
- Compiler control-flow transforms are applied to close timing leaks.
- Evaluated on a realistic RISC-V application with static and statistical timing analysis.
- Authors do not claim cycle-accurate constant time, but tests suggest resistance to timing attacks.
From the original article
1 min read at arxiv.orgConstant-time execution is an important security property, especially for IoT devices, that prevents the leakage of sensitive information over timing side-channels. However, achieving constant-time execution is very hard when going down to the cycle level, at least on realistic devices.
By Julian Ganz · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.