Abstract:Cryptographic hash functions have become the basis of modern network computing for identity authorization and secure computing; protocol consistency of cryptographic hash functions is one of the most important properties that affect the security and correctness of cryptographic implementations, and protocol consistency should be well proven before being applied in practice. Software verification has seen substantial application in safety-critical areas and has shown the ability to deliver better quality assurance for modern software; thus, applying software verification to a protocol consistency proof for cryptographic hash functions is a reasonable approach to prove their correctness. Verification of protocol consistency of cryptographic hash functions includes modeling of the cryptographic protocol and program analysis of the cryptographic implementation; these require a dedicated cryptographic implementation model that preserves the semantics of the code, efficient analysis of cryptographic operations on arrays and bits, and the ability to verify large-scale implementations. In this paper, we propose a fully automatic software verification framework, VeriHash, that brings software verification to protocol consistency proofs for cryptographic hash function implementations. It solves the above challenges by introducing a novel cryptographic model design for modeling the semantics of cryptographic hash function implementations, extended array theories for analysis of operations, and compositional verification for scalability. We evaluated our verification framework on two SHA-3 cryptographic hash function implementations: the winner of the NIST SHA-3 competition, Keccack; and an open-source hash program, RHash. We successfully verified the core parts of the two implementations and reproduced a bug in the published edition of RHash.

Methods and apparatus to enable runtime checksum verification of block device images

A Secure Scan Method for Crypto Chips

Edwards curve digital signature algorithm for video integrity verification on blockchain framework

Hard Disk Integrity Check by Hashing with Combinatorial Group Testing

A Joint Biometrics and Watermarking Based Framework for Fingerprinting, Copyright Protection, Proof of Ownership, and Security Applications

An improved method of data integrity verification based on homomorphic hashing in cloud storage

Efficient Disk Encryption and Verification Through Trusted Nonce.

Increasing the trustworthiness of commodity hardware through software

DataSafe: Copyright Protection with PUF Watermarking and Blockchain Tracking

Blockchain-based verification framework for data integrity in edge-cloud storage

SM2-Based Offline/Online Efficient Data Integrity Verification Scheme for Multiple Application Scenarios

Identifying and Understanding Self-Checksumming Defenses in Software

Design and Implementation of Self-securing Disk

Secure Software/Hardware Hybrid In-Field Testing for System-on-Chip

Blockchain assisted blind signature algorithm with data integrity verification scheme

Letter to the editor: "Edwards curve digital signature algorithm for video integrity verification on blockchain framework"

A blockchain‐based privacy‐preserving authentication system for ensuring multimedia content integrity

A Robust And Secure Media Signature Scheme For Jpeg Images

Verification of Implementations of Cryptographic Hash Functions

A Verification Method of NAND Flash Simulation Module

Apparatus and method for protection of critical embedded system components via hardware-isolated secure element-based monitor