Automated Template-free Synthesis of Instruction-Centric Leakage Contracts for Black-Box CPUs

arXiv:2607.15118 · cs.CR · Submitted 2026-07-16 · Read on arXiv

Elvira Moreno, Tiziano Marinaro, Ryan Williams, Marco Patrignani, Roberto Guanciale, Hamed Nemati, Marco Guarnieri

cs.CR

Submitted: 2026-07-16

Comments: 16 pages (12 pages main body, 4 pages bibliography and appendix), 4 figures, 6 tables

Code: https://github.com/lowRISC/ibex

Project page: https://microsoft.github.io/sca-fuzzer/user

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Trace — 55× in this paper · explained in 2 episodes
Core — 10× in this paper · explained in 2 episodes
Verification — 6× in this paper · explained in 2 episodes
Abstraction — 4× in this paper · explained in 1 episode
Symposium on Security and Privacy — 4× in this paper
SMT solver — 3× in this paper · explained in 2 episodes
Axioms — 2× in this paper · explained in 2 episodes
Consistency — 2× in this paper · explained in 3 episodes
Accuracy — 1× in this paper · explained in 1 episode
Adam — 1× in this paper · explained in 2 episodes
Decode — 1× in this paper · explained in 2 episodes
Formal Verification — 1× in this paper · explained in 2 episodes
Information Leakage — 1× in this paper · explained in 2 episodes
Instruction Set Architecture — 1× in this paper
Register-Transfer Level — 1× in this paper

Sources

Related papers