News for hackers. Stuff that matters.

A comment on An Empirical Study of Vulnerabilities in Cryptographic Libraries. Parent comment

Re:An Empirical Study of Vulnerabilities in Cryptographic Li... by chrisseaton on Sunday July 25, 2021 @09:03AM (#27948871)
Formal verification is a thing people do - and I think that’s what most people think from ‘verified’. They aren’t conspiracy theorists they’re proving things like that your C implementation code is defined and matches what you think you’ve written, since that’s where these errors creep in.
[ Parent | on HN ]
Re:An Empirical Study of Vulnerabilities in Cryptographic Li... by rocqua on Sunday July 25, 2021 @10:20AM (#27949354)
you can do those things under the assumption "the compiler is correct". That still very much counts as formal verification.
[ Parent | on HN ]