PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Part 2: Improving crypto code in Rust using LLVM’s optnone

blog.trailofbits.com | blog | #rust | #cryptography | #llvm | #compilers | #constant-time | #side-channels
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

This post implements an optnone attribute in rustc so developers can disable optimizations for security-critical functions, examining the resulting LLVM IR and codegen pitfalls.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Part 1: The life of an optimization barrier
Constant-time Rust cryptography can be broken by optimization. Compiling to WebAssembly means code passes through two optimizers, and LLVM itself may introduce a new timing side-channel.
blog · blog.trailofbits.com
ReMASTering Applications by Obfuscating during Compilation
Introducing MAST, an LLVM-based obfuscation toolkit: symbol mangling, opaque predicates, code diffusion and environmental keying, inspired by nation-state malware; funded via DARPA Cyber Fast Track.
research · blog.quarkslab.com
Implementing a Custom Directive Handler in Clang
How-to on implementing a custom #pragma directive handler in clang, used to drive an LLVM-based obfuscator while keeping sources compilable elsewhere; a tour of the preprocessing and parsing stages.
research · blog.quarkslab.com
llvm_dev_meeting:
Report from the 2015 LLVM Developer Meeting: Quarkslab's out-of-tree pass tutorial and a lightning talk on LLVM's limits, plus recaps of talks on WebAssembly, OpenCL and performance tracking.
research · blog.quarkslab.com
goto llvm_dev_meeting;
Announcement: Quarkslab's compiler crew is off to the LLVM Developer Meeting in California, presenting an out-of-tree LLVM pass tutorial and a lightning talk on bytecode obfuscation.
research · blog.quarkslab.com
Turning Regular Code Into Atrocities With LLVM: The Return
LLVM obfuscation tutorial, part two: a pass that hides XOR operations by converting operands from base 2 to base 3 before adding them, turning a simple xor into a much harder-to-recognise sequence.
Back