<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04818801v2</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-17T01:25:03+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Formally Verified Hardening of C Programs against Hardware Fault Injection</title>
            <author role="aut">
              <persName>
                <forename type="first">Basile</forename>
                <surname>Pesin</surname>
              </persName>
              <email type="md5">0896aaf8c893c3acc90b805c4b4f1e0a</email>
              <email type="domain">enac.fr</email>
              <idno type="idhal" notation="string">basilepesin</idno>
              <idno type="idhal" notation="numeric">1112649</idno>
              <idno type="halauthorid" notation="string">2159939-1112649</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-3575-7770</idno>
              <affiliation ref="#struct-193083"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sylvain</forename>
                <surname>Boulmé</surname>
              </persName>
              <email type="md5">c06008fc0f03b7f55f5decb7088a2571</email>
              <email type="domain">univ-grenoble-alpes.fr</email>
              <idno type="idhal" notation="string">sylvain-boulme</idno>
              <idno type="idhal" notation="numeric">4700</idno>
              <idno type="halauthorid" notation="string">26303-4700</idno>
              <idno type="IDREF">https://www.idref.fr/257287515</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-9501-9606</idno>
              <affiliation ref="#struct-1043148"/>
              <affiliation ref="#struct-1150661"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">David</forename>
                <surname>Monniaux</surname>
              </persName>
              <email type="md5">ceebaa21abca18130dac66c12ab347bf</email>
              <email type="domain">univ-grenoble-alpes.fr</email>
              <ptr type="url" target="https://www-verimag.imag.fr/~monniaux/"/>
              <idno type="idhal" notation="string">david-monniaux</idno>
              <idno type="idhal" notation="numeric">9093</idno>
              <idno type="halauthorid" notation="string">2535-9093</idno>
              <idno type="IDREF">https://www.idref.fr/070681600</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-7671-6126</idno>
              <affiliation ref="#struct-1043148"/>
              <affiliation ref="#struct-1095810"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Marie-Laure</forename>
                <surname>Potet</surname>
              </persName>
              <email type="md5">ed3f922ce4d3bf8677fb634eaa9a08e2</email>
              <email type="domain">imag.fr</email>
              <idno type="idhal" notation="numeric">1162819</idno>
              <idno type="halauthorid" notation="string">119416-1162819</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-7070-6290</idno>
              <idno type="IDREF">https://www.idref.fr/034097600</idno>
              <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=88XLiJoAAAAJ</idno>
              <idno type="VIAF">https://viaf.org/viaf/225413936</idno>
              <idno type="ISNI">http://isni.org/isni/0000000362181049</idno>
              <affiliation ref="#struct-1043148"/>
              <affiliation ref="#struct-1150661"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Sylvain</forename>
                <surname>Boulmé</surname>
              </persName>
              <email type="md5">c06008fc0f03b7f55f5decb7088a2571</email>
              <email type="domain">univ-grenoble-alpes.fr</email>
            </editor>
            <funder ref="#projanr-69635"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1">
              <date type="whenSubmitted">2024-12-04 14:08:43</date>
            </edition>
            <edition n="v2" type="current">
              <date type="whenSubmitted">2024-12-08 15:06:48</date>
              <date type="whenWritten">2024-12-05</date>
              <date type="whenModified">2025-09-27 19:52:26</date>
              <date type="whenReleased">2024-12-13 10:59:11</date>
              <date type="whenProduced">2025-01-20</date>
              <date type="whenEndEmbargoed">2024-12-08</date>
              <ref type="file" target="https://hal.science/hal-04818801v2/document">
                <date notBefore="2024-12-08"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04818801v2/file/hal_chamois_arsene2024.pdf" id="file-4825643-4202423">
                <date notBefore="2024-12-08"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="318832">
                <persName>
                  <forename>Sylvain</forename>
                  <surname>Boulmé</surname>
                </persName>
                <email type="md5">c06008fc0f03b7f55f5decb7088a2571</email>
                <email type="domain">univ-grenoble-alpes.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04818801</idno>
            <idno type="halUri">https://hal.science/hal-04818801</idno>
            <idno type="halBibtex">pesin:hal-04818801</idno>
            <idno type="halRefHtml">&lt;i&gt;14th ACM SIGPLAN International Conference on Certified Programs and Proofs (CPP’25)&lt;/i&gt;, Jan 2025, Denver (CO), United States. &lt;a target="_blank" href="https://dx.doi.org/10.1145/3703595.3705880"&gt;&amp;#x27E8;10.1145/3703595.3705880&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">14th ACM SIGPLAN International Conference on Certified Programs and Proofs (CPP’25), Jan 2025, Denver (CO), United States. &amp;#x27E8;10.1145/3703595.3705880&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-4825643-4202423"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="ENAC">Ecole Nationale de l'Aviation Civile</idno>
            <idno type="stamp" n="UGA">HAL Grenoble Alpes</idno>
            <idno type="stamp" n="IMAG">IMAG</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INPG">Institut polytechnique de Grenoble</idno>
            <idno type="stamp" n="LII" corresp="ENAC">ENAC | Equipe de recherche Informatique Interactive</idno>
            <idno type="stamp" n="VERIMAG">VERIMAG</idno>
            <idno type="stamp" n="CYBERALPS">Grenoble Alpes Cybersecurity Institute</idno>
            <idno type="stamp" n="FONISEN">Fédération de recherche ENAC ISAE-SUPAERO ONERA</idno>
            <idno type="stamp" n="UGA-EPE">Université Grenoble Alpes [2020-*]</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="CYBERSCURITE">PEPR Cybersécurité</idno>
            <idno type="stamp" n="ARSENE">ARSENE</idno>
            <idno type="stamp" n="TEST-UGA">TEST-UGA</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Formally Verified Hardening of C Programs against Hardware Fault Injection</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Basile</forename>
                    <surname>Pesin</surname>
                  </persName>
                  <email type="md5">0896aaf8c893c3acc90b805c4b4f1e0a</email>
                  <email type="domain">enac.fr</email>
                  <idno type="idhal" notation="string">basilepesin</idno>
                  <idno type="idhal" notation="numeric">1112649</idno>
                  <idno type="halauthorid" notation="string">2159939-1112649</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-3575-7770</idno>
                  <affiliation ref="#struct-193083"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sylvain</forename>
                    <surname>Boulmé</surname>
                  </persName>
                  <email type="md5">c06008fc0f03b7f55f5decb7088a2571</email>
                  <email type="domain">univ-grenoble-alpes.fr</email>
                  <idno type="idhal" notation="string">sylvain-boulme</idno>
                  <idno type="idhal" notation="numeric">4700</idno>
                  <idno type="halauthorid" notation="string">26303-4700</idno>
                  <idno type="IDREF">https://www.idref.fr/257287515</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-9501-9606</idno>
                  <affiliation ref="#struct-1043148"/>
                  <affiliation ref="#struct-1150661"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">David</forename>
                    <surname>Monniaux</surname>
                  </persName>
                  <email type="md5">ceebaa21abca18130dac66c12ab347bf</email>
                  <email type="domain">univ-grenoble-alpes.fr</email>
                  <ptr type="url" target="https://www-verimag.imag.fr/~monniaux/"/>
                  <idno type="idhal" notation="string">david-monniaux</idno>
                  <idno type="idhal" notation="numeric">9093</idno>
                  <idno type="halauthorid" notation="string">2535-9093</idno>
                  <idno type="IDREF">https://www.idref.fr/070681600</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-7671-6126</idno>
                  <affiliation ref="#struct-1043148"/>
                  <affiliation ref="#struct-1095810"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Marie-Laure</forename>
                    <surname>Potet</surname>
                  </persName>
                  <email type="md5">ed3f922ce4d3bf8677fb634eaa9a08e2</email>
                  <email type="domain">imag.fr</email>
                  <idno type="idhal" notation="numeric">1162819</idno>
                  <idno type="halauthorid" notation="string">119416-1162819</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-7070-6290</idno>
                  <idno type="IDREF">https://www.idref.fr/034097600</idno>
                  <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=88XLiJoAAAAJ</idno>
                  <idno type="VIAF">https://viaf.org/viaf/225413936</idno>
                  <idno type="ISNI">http://isni.org/isni/0000000362181049</idno>
                  <affiliation ref="#struct-1043148"/>
                  <affiliation ref="#struct-1150661"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>14th ACM SIGPLAN International Conference on Certified Programs and Proofs (CPP’25)</title>
                  <date type="start">2025-01-20</date>
                  <date type="end">2025-01-21</date>
                  <settlement>Denver (CO)</settlement>
                  <country key="US">United States</country>
                </meeting>
                <imprint/>
              </monogr>
              <idno type="doi">10.1145/3703595.3705880</idno>
              <ref target="https://certicompil.gricad-pages.univ-grenoble-alpes.fr/Chamois-Arsene/" type="seeAlso"/>
              <ref target="https://hal.science/hal-04854350" type="seeAlso"/>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Formally Verified Compiler</term>
                <term xml:lang="en">Software Counter-Measure</term>
                <term xml:lang="en">Control Flow Integrity</term>
                <term xml:lang="en">Coq Proof Assistant</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>A fault attack is a malicious manipulation of the hardware (e.g., electromagnetic or laser pulse) that modifies the behavior of the software. Fault attacks typically target sensitive applications such as cryptography services, authentication, boot-loaders or firmware updaters. They can be defended against by adding countermeasures, that is, control flow checks and redundancies, either in the hardware, or in the software running on it. In particular, software countermeasures may be added automatically during compilation.In this paper, we describe a formally verified implementation of this approach in the CompCert verified compiler for the C language. We implemented two existing countermeasures protecting the control flow of the program as program transformations over a middle-end intermediate representation of CompCert, RTL. We proved that these countermeasures are correct, that is, they do not change the observable behavior of the program during an execution without fault injection. We then modeled the effect of a fault on the behavior of the program as an extension of the semantic model of RTL. We used this new model to formally prove the efficacy of the countermeasure: all attacks are either caught, or produce no observable effects. In addition to this formal reasoning, we evaluated the protected program using Lazart, a tool for symbolic fault injection, and measured the effect of optimizations on security and performance.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-193083" status="VALID">
          <orgName>ENAC - Equipe Informatique Interactive</orgName>
          <orgName type="acronym">LII</orgName>
          <desc>
            <address>
              <addrLine>ENAC 7 avenue Edouard Belin CS 54055 31055 TOULOUSE Cedex 4 FRANCE</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://lii.enac.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-380071" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-1043148" status="VALID">
          <idno type="IdRef">184945623</idno>
          <idno type="ISNI">0000 0004 0382 7652</idno>
          <idno type="RNSR">199511789R</idno>
          <idno type="ROR">https://ror.org/05afmzm11</idno>
          <orgName>VERIMAG</orgName>
          <orgName type="acronym">VERIMAG - IMAG</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>VerimagBâtiment IMAGUniversité Grenoble Alpes700, avenue centrale38401 Saint Martin d’Hères</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www-verimag.imag.fr/?lang=fr</ref>
          </desc>
          <listRelation>
            <relation name="UMR5104" active="#struct-441569" type="direct"/>
            <relation active="#struct-1042703" type="direct"/>
            <relation active="#struct-1043329" type="direct"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-1150661" status="VALID">
          <orgName>École nationale supérieure d'informatique et de mathématiques appliquées</orgName>
          <orgName type="acronym">Grenoble INP ENSIMAG</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>681 rue de la Passerelle - 38400 Saint-Martin-d'Hères</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://ensimag.grenoble-inp.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-1042703" type="direct"/>
            <relation active="#struct-1043329" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-1095810" status="VALID">
          <idno type="IdRef">232435073</idno>
          <idno type="ISNI">0000000403871581</idno>
          <idno type="ROR">https://ror.org/04z22qz54</idno>
          <orgName>Institut des sciences informatiques et de leurs interactions - CNRS Sciences informatiques</orgName>
          <orgName type="acronym">INS2I-CNRS</orgName>
          <date type="start">2009-11-01</date>
          <desc>
            <address>
              <addrLine>CENTRE NATIONAL DE LA RECHERCHE SCIENTIFIQUE3 RUE MICHEL ANGE75794 PARIS CEDEX 16 - France</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://ins2i.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-380071" status="VALID">
          <idno type="IdRef">027771881</idno>
          <idno type="ISNI">0000 0001 2112 1176 </idno>
          <idno type="RNSR">201923158U</idno>
          <idno type="ROR">https://ror.org/022zdgq74</idno>
          <orgName>Ecole Nationale de l'Aviation Civile</orgName>
          <orgName type="acronym">ENAC</orgName>
          <desc>
            <address>
              <addrLine>7 avenue Edouard BelinCS 5400531055 Toulouse cedex 4</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.enac.fr</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-1042703" status="VALID">
          <idno type="IdRef">240648315</idno>
          <idno type="ROR">https://ror.org/02rx3b187</idno>
          <orgName>Université Grenoble Alpes</orgName>
          <orgName type="acronym">UGA</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>Adresse CS 40700 - 38058 Grenoble cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-grenoble-alpes.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-1043329" status="VALID">
          <idno type="IdRef">026388804</idno>
          <idno type="ROR">https://ror.org/05sbt2524</idno>
          <orgName>Institut polytechnique de Grenoble - Grenoble Institute of Technology</orgName>
          <orgName type="acronym">Grenoble INP</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>46 avenue Félix Viallet 38031 Grenoble Cedex 1</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.grenoble-inp.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-1042703" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-69635" status="VALID">
          <idno type="anr">ANR-22-PECY-0004</idno>
          <orgName>ARSENE</orgName>
          <desc>ARchitectures SEcurisées pour le Numérique Embarqué</desc>
          <date type="start">2022</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>