Noise: A Library of Verified High-Performance Secure Channel Protocol Implementations

Abstract

The Noise protocol framework defines a succinct notation and execution framework for a large class of 59+ secure channel protocols, some of which are used in popular applications such as WhatsApp and WireGuard. We present a verified implementation of a Noise protocol compiler that takes any Noise protocol, and produces an optimized C implementation with extensive correctness and security guarantees. To this end, we formalize the complete Noise stack in F*, from the low-level cryptographic library to a high-level API. We write our compiler also in F*, prove that it meets our formal specification once and for all, and then specialize it on-demand for any given Noise protocol, relying on a novel technique called hybrid embedding. We thus establish functional correctness, memory safety and a form of side-channel resistance for the generated C code for each Noise protocol. We propagate these guarantees to the high-level API, using defensive dynamic checks to prevent incorrect uses of the protocol. Finally, we formally state and prove the security of our Noise code, by building on a symbolic model of cryptography in F*, and formally link high-level API security goals stated in terms of security levels to low-level cryptographic guarantees. Ours are the first comprehensive verification results for a protocol compiler that targets C code and the first verified implementations of any Noise protocol. We evaluate our framework by generating implementations for all 59 Noise protocols and by comparing the size, performance, and security of our verified code against other (unverified) implementations and prior security analyses of Noise.

A Generic Methodology for the Modular Verification of Security Protocol Implementations

“…The literature distinguishes between weak and strong forward secrecy. We were able to reuse formalizations from existing work [11,42,43], which are phrased as trace-based security properties and, thus, directly supported by our methodology.…”

“…Prior work [11,39,40,42,62,63] on verifying properties of Wire-Guard (our main case study) is concerned with verifying models of the protocol, not existing implementations.…”

“…One approach at obtaining verified protocol implementations is to generate an executable implementation automatically from a verified model (e.g., [7][8][9][10][11]). For instance, Bhargavan et al's DY* framework [9][10][11] generates OCaml or C code from a functional implementation in F* [12]. The generated code is secure by construction (provided the code generator is correct).…”

Sistem Smart Library Berbasis Arduino di Perpustakaan Sekolah

“…Terdapat beberapa teknologi IoT yang dibutuhkan oleh perpustakaan, Penggunaan (RFID) menambah Tingkat canggih dalam pengelolaan buku dan item sehingga memberikan layanan yang mempermudah menemukan lokasi buku dan pintu masuk yang disupport oleh perangkat system yang didasarkan pada pengenalan sidik jari untuk memberikkan akses masuk khusus anggota [3] [4]. Untuk menerapkan perpustakaan yang kebebasan dari gangguan kebisingan yang sebagian besar disebabkan oleh para pengunjung [5] [6]. Kebisingan di perpustakaan Sistem Smart Library Berbasis Arduino di... (Wibowo et al, 2024) dapat mengganggu fokus, mengganggu kegiatan belajar, terutama dari suara tertentu seperti dering telepon dan percakapan orang [7].…”