Abstract:The Check tools automate formal memory consistency model and security verification of processors by analyzing abstract models of microarchitectures, called $\mu$SPEC models. Despite the efficacy of this approach, a verification gap between $\mu$SPEC models, which must be manually written, and RTL limits the Check tools' broad adoption. Our prior work, called RTL2$\mu$SPEC, narrows this gap by automatically synthesizing formally verified $\mu$SPEC models from SystemVerilog implementations of simple processors. But, RTL2$\mu$SPEC assumes input designs where an instruction (e.g., a load) cannot exhibit more than one microarchitectural execution path ($\mu$PATH, e.g., a cache hit or miss path) -- its single-execution-path assumption. In this paper, we first propose an automated approach and tool, called RTL2M$\mu$PATH, that resolves RTL2$\mu$SPEC's single-execution-path assumption. Given a SystemVerilog processor design, instruction encodings, and modest design metadata, RTL2M$\mu$PATH finds a complete set of formally verified $\mu$PATHs for each instruction. Next, we make an important observation: an instruction that can exhibit more than one $\mu$PATH strongly indicates the presence of a microarchitectural side channel in the input design. Based on this observation, we then propose an automated approach and tool, called SynthLC, that extends RTL2M$\mu$PATH with a symbolic information flow analysis to support synthesizing a variety of formally verified leakage contracts from SystemVerilog processor designs. Leakage contracts are foundational to state-of-the-art defenses against hardware side-channel attacks. SynthLC is the first automated methodology for formally verifying hardware adherence to them.

A Formal Model for Proving Hardware Timing Properties and Identifying Timing Channels

Hardware security and reliability verification based on fault propagation model

Towards Efficient Verification of Constant-Time Cryptographic Implementations

MCU-Wide Timing Side Channels and Their Detection

Eliminating Timing Side-Channel Leaks using Program Repair

A Formal Model For Real-Time Parallel Computation

Formal Model Checking to Multi-Clock Design by Using Virtual Clock

On Timing Model Extraction and Hierarchical Statistical Timing Analysis

Using Coq for Formal Modeling and Verification of Timed Connectors.

Design for Assurance: Employing Functional Verification Tools for Thwarting Hardware Trojan Threat in 3PIPs

Hardware Trojan Detection Using Effective Property-Checking Method

A Formal Specification and Verification Framework for Timed Security Protocols.

Iodine: Verifying Constant-Time Execution of Hardware

RTL2M$μ$PATH: Multi-$μ$PATH Synthesis with Applications to Hardware Security Verification

Formal Specification and Analysis of Hardware Systems in Timed Chi.

Verifying timing constraints in real-time systems

Timed Chi: Modeling, Simulation and Verification of Hardware Systems

Specification and Analysis of Hardware Systems Using Timed Process

SCAFinder: Formal Verification of Cache Fine-Grained Features for Side Channel Detection

Model Checking on Clock Domain Crossing Design of System-on-Chip

A Formal Methodology for Verifying Side-Channel Vulnerabilities in Cache Architectures