<?xml version="1.0" encoding="UTF-8"?><xml><records><record><source-app name="Biblio" version="6.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Jorge Sousa Pinto</style></author><author><style face="normal" font="default" size="100%">José Bacelar Almeida</style></author><author><style face="normal" font="default" size="100%">Manuel Bernardo Barbosa</style></author><author><style face="normal" font="default" size="100%">Bárbara Vieira</style></author><author><style face="normal" font="default" size="100%">Jean-Christophe Filliâtre</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">CAOVerif: An Open- Source Deductive Verification Platform for Cryptographic Software Implementations</style></title><secondary-title><style face="normal" font="default" size="100%">Science of Computer Programming</style></secondary-title></titles><dates><year><style  face="normal" font="default" size="100%">2014</style></year></dates><urls><related-urls><url><style face="normal" font="default" size="100%">https://haslab.uminho.pt/sites/default/files/jsp/files/opencertjournal_ack.pdf</style></url></related-urls></urls><publisher><style face="normal" font="default" size="100%">Elsevier</style></publisher><volume><style face="normal" font="default" size="100%">91</style></volume><pages><style face="normal" font="default" size="100%">216–233</style></pages><abstract><style face="normal" font="default" size="100%">&lt;p&gt;CAO is a domain-specific imperative language for cryptography, offering a rich mathematical type system and crypto-oriented language constructions. We describe the design and implementation of a deductive verification platform for CAO and demonstrate that the development time of such a complex verification tool could be greatly reduced by building on the Jessie plug-in included in the Frama-C framework. We discuss the interesting challenges raised by the domain-specific characteristics of CAO, and describe how we tackle these problems in our design. We base our presentation on real-world examples of CAO code, extracted from the open-source code of the NaCl cryptographic library, and illustrate how various cryptography-relevant security properties can be verified.&lt;/p&gt;
</style></abstract></record></records></xml>