<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-05249675</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-02T02:32:58+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Let’s DOIT: Using Intel’s Extended HW/SW Contract for Secure Compilation of Crypto Code</title>
            <author role="aut">
              <persName>
                <forename type="first">Santiago</forename>
                <surname>Arranz-Olmos</surname>
              </persName>
              <idno type="halauthorid">3764562-0</idno>
              <affiliation ref="#struct-576324"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Gilles</forename>
                <surname>Barthe</surname>
              </persName>
              <idno type="halauthorid">117487-0</idno>
              <affiliation ref="#struct-576324"/>
              <affiliation ref="#struct-81272"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Benjamin</forename>
                <surname>Grégoire</surname>
              </persName>
              <idno type="halauthorid">11069-0</idno>
              <affiliation ref="#struct-1171444"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Jan</forename>
                <surname>Jancar</surname>
              </persName>
              <idno type="halauthorid">2523491-0</idno>
              <affiliation ref="#struct-412450"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Vincent</forename>
                <surname>Laporte</surname>
              </persName>
              <email type="md5">33e4fbd64fa18c3fc30952bdf41b25cf</email>
              <email type="domain">inria.fr</email>
              <idno type="idhal" notation="string">vincent-laporte</idno>
              <idno type="idhal" notation="numeric">738000</idno>
              <idno type="halauthorid" notation="string">51466-738000</idno>
              <idno type="IDREF">https://www.idref.fr/191832324</idno>
              <affiliation ref="#struct-445522"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Tiago</forename>
                <surname>Oliveira</surname>
              </persName>
              <idno type="halauthorid">387613-0</idno>
              <affiliation ref="#struct-1163181"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Peter</forename>
                <surname>Schwabe</surname>
              </persName>
              <idno type="halauthorid">1017925-0</idno>
              <affiliation ref="#struct-576324"/>
              <affiliation ref="#struct-300856"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Vincent</forename>
                <surname>Laporte</surname>
              </persName>
              <email type="md5">33e4fbd64fa18c3fc30952bdf41b25cf</email>
              <email type="domain">inria.fr</email>
            </editor>
            <funder ref="#projanr-69633"/>
            <funder>RedHat Research Czech and the Cyber-security ExcellenceHub in Estonia and South Moravia (CHESS, 101087529)</funder>
            <funder>Deutsche Forschungsgemeinschaft (DFG, German research Foundation) as part of the Excellence Strategy of the German Federal and State Governments – EXC 2092 CASA - 390781972</funder>
            <funder>German Federal Ministry of Education and Research (BMBF) in the course of the 6GEM research hub under grant number 16KISK038</funder>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2025-09-11 11:21:01</date>
              <date type="whenModified">2025-11-04 12:03:17</date>
              <date type="whenReleased">2025-09-11 14:39:15</date>
              <date type="whenProduced">2025-06-05</date>
              <date type="whenEndEmbargoed">2025-09-11</date>
              <ref type="file" target="https://hal.univ-lorraine.fr/hal-05249675v1/document">
                <date notBefore="2025-09-11"/>
              </ref>
              <ref type="file" subtype="greenPublisher" n="1" target="https://hal.univ-lorraine.fr/hal-05249675v1/file/TCHES2025_3_23.pdf" id="file-5249675-4510852">
                <date notBefore="2025-09-11"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="944155">
                <persName>
                  <forename>Vincent</forename>
                  <surname>Laporte</surname>
                </persName>
                <email type="md5">33e4fbd64fa18c3fc30952bdf41b25cf</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-05249675</idno>
            <idno type="halUri">https://hal.univ-lorraine.fr/hal-05249675</idno>
            <idno type="halBibtex">arranzolmos:hal-05249675</idno>
            <idno type="halRefHtml">&lt;i&gt;IACR Transactions on Cryptographic Hardware and Embedded Systems&lt;/i&gt;, 2025, 2025 (3), pp.644-667. &lt;a target="_blank" href="https://dx.doi.org/10.46586/tches.v2025.i3.644-667"&gt;&amp;#x27E8;10.46586/tches.v2025.i3.644-667&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">IACR Transactions on Cryptographic Hardware and Embedded Systems, 2025, 2025 (3), pp.644-667. &amp;#x27E8;10.46586/tches.v2025.i3.644-667&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-5249675-4510852"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="INRIA-SOPHIA">INRIA Sophia Antipolis - Méditerranée</idno>
            <idno type="stamp" n="INRIASO">INRIA-SOPHIA</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="LORIA2">Publications du LORIA</idno>
            <idno type="stamp" n="INRIA-NANCY-GRAND-EST">INRIA Nancy - Grand Est</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="CENTRALESUPELEC">Ecole CentraleSupélec</idno>
            <idno type="stamp" n="UNIV-LORRAINE">Université de Lorraine</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="LORIA">Laboratoire Lorrain de Recherche en Informatique et ses Applications</idno>
            <idno type="stamp" n="LORIA-FM" corresp="LORIA">Department of Formal methods</idno>
            <idno type="stamp" n="UNIV-COTEDAZUR">Université Côte d'Azur</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="INRIA-ETATSUNIS">Copublications Inria-Etats-Unis</idno>
            <idno type="stamp" n="INRIA-ALLEMAGNE">INRIA-ALLEMAGNE</idno>
            <idno type="stamp" n="CYBERSCURITE">PEPR Cybersécurité</idno>
            <idno type="stamp" n="SVP">SVP</idno>
            <idno type="stamp" n="AM2I-UL">Pôle scientifique Automatique, Mathématiques, Informatique et leurs Intéractions de l'Université de Lorraine</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Let’s DOIT: Using Intel’s Extended HW/SW Contract for Secure Compilation of Crypto Code</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Santiago</forename>
                    <surname>Arranz-Olmos</surname>
                  </persName>
                  <idno type="halauthorid">3764562-0</idno>
                  <affiliation ref="#struct-576324"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Gilles</forename>
                    <surname>Barthe</surname>
                  </persName>
                  <idno type="halauthorid">117487-0</idno>
                  <affiliation ref="#struct-576324"/>
                  <affiliation ref="#struct-81272"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Benjamin</forename>
                    <surname>Grégoire</surname>
                  </persName>
                  <idno type="halauthorid">11069-0</idno>
                  <affiliation ref="#struct-1171444"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Jan</forename>
                    <surname>Jancar</surname>
                  </persName>
                  <idno type="halauthorid">2523491-0</idno>
                  <affiliation ref="#struct-412450"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Vincent</forename>
                    <surname>Laporte</surname>
                  </persName>
                  <email type="md5">33e4fbd64fa18c3fc30952bdf41b25cf</email>
                  <email type="domain">inria.fr</email>
                  <idno type="idhal" notation="string">vincent-laporte</idno>
                  <idno type="idhal" notation="numeric">738000</idno>
                  <idno type="halauthorid" notation="string">51466-738000</idno>
                  <idno type="IDREF">https://www.idref.fr/191832324</idno>
                  <affiliation ref="#struct-445522"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Tiago</forename>
                    <surname>Oliveira</surname>
                  </persName>
                  <idno type="halauthorid">387613-0</idno>
                  <affiliation ref="#struct-1163181"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Peter</forename>
                    <surname>Schwabe</surname>
                  </persName>
                  <idno type="halauthorid">1017925-0</idno>
                  <affiliation ref="#struct-576324"/>
                  <affiliation ref="#struct-300856"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">130471</idno>
                <idno type="issn">2569-2925</idno>
                <title level="j">IACR Transactions on Cryptographic Hardware and Embedded Systems</title>
                <imprint>
                  <publisher>IACR</publisher>
                  <biblScope unit="volume">2025</biblScope>
                  <biblScope unit="issue">3</biblScope>
                  <biblScope unit="pp">644-667</biblScope>
                  <date type="datePub">2025-06-05</date>
                </imprint>
              </monogr>
              <idno type="doi">10.46586/tches.v2025.i3.644-667</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">constant-time code</term>
                <term xml:lang="en">high-assurance</term>
                <term xml:lang="en">Jasmin</term>
                <term xml:lang="en">data-operand-independent timing</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>It is a widely accepted standard practice to implement cryptographic software so that secret inputs do not influence the cycle count. Software following this paradigm is often referred to as “constant-time” software and typically involves following three rules: 1) never branch on a secret-dependent condition, 2) never access memory at a secret-dependent location, and 3) avoid variable-time arithmetic operations on secret data. The third rule requires knowledge about such variable-time arithmetic instructions, or vice versa, which operations are safe to use on secret inputs. For a long time, this knowledge was based on either documentation or microbenchmarks, but critically, there were never any guarantees for future microarchitectures. This changed with the introduction of the data-operand-independent-timing (DOIT) mode on Intel CPUs and, to some extent, the data-independent-timing (DIT) mode on Arm CPUs. Both Intel and Arm document a subset of their respective instruction sets that are intended to leak no information about their inputs through timing, even on future microarchitectures if the CPU is set to run in a dedicated DOIT (or DIT) mode.In this paper, we present a principled solution that leverages DOIT to enable cryptographic software that is future-proof constant-time, in the sense that it ensures that only instructions from the DOIT subset are used to operate on secret data, even during speculative execution after a mispredicted branch or function return location. For this solution, we build on top of existing security type systems in the Jasmin framework for high-assurance cryptography.We then use our solution to evaluate the extent to which existing cryptographic software built to be “constant-time” is already secure in this stricter paradigm implied by DOIT and what the performance impact is to move from constant-time to future-proof constant-time.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-576324" status="VALID">
          <orgName>Max Planck Institute for Security and Privacy [Bochum]</orgName>
          <orgName type="acronym">MPI SP</orgName>
          <desc>
            <address>
              <country key="DE"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-81272" status="VALID">
          <idno type="ROR">https://ror.org/04xvfkh51</idno>
          <orgName>Institute IMDEA Software [Madrid]</orgName>
          <desc>
            <address>
              <addrLine>Campus de Montegancedo 28223 Pozuelo de Alarcón Madrid</addrLine>
              <country key="ES"/>
            </address>
            <ref type="url">http://software.imdea.org/</ref>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-1171444" status="VALID">
          <idno type="RNSR">202324427F</idno>
          <idno type="ROR">https://ror.org/024wx0b20</idno>
          <orgName>Languages de Programmation Sécures et Outils pour la Sécurité</orgName>
          <orgName type="acronym">SPLITS</orgName>
          <date type="start">2023-07-01</date>
          <date type="end">2027-06-30</date>
          <desc>
            <address>
              <addrLine>2004 routes des Lucioles06902 Sophia Antipolis</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-34586" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-412450" status="VALID">
          <idno type="IdRef">030138566</idno>
          <idno type="ISNI">0000000121940956</idno>
          <idno type="ROR">https://ror.org/02j46qs45</idno>
          <idno type="Wikidata">Q763586</idno>
          <orgName>Masaryk University [Brno] = Masarykova univerzita [Brno] = Université Masaryk [Brno]</orgName>
          <orgName type="acronym">MU / MUNI</orgName>
          <date type="start">1919-01-28</date>
          <desc>
            <address>
              <addrLine>Žerotínovo nám. 617/9 – 601 77 Brno – Czech Republic</addrLine>
              <country key="CZ"/>
            </address>
            <ref type="url">https://www.muni.cz/en</ref>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-445522" status="VALID">
          <idno type="RNSR">201622052E</idno>
          <idno type="ROR">https://ror.org/019yhsq25</idno>
          <orgName>Proof techniques for security protocols</orgName>
          <orgName type="acronym">PESTO</orgName>
          <date type="start">2016-01-01</date>
          <date type="end">2028-10-31</date>
          <desc>
            <address>
              <addrLine>615 Rue du Jardin-Botanique, 54600 Villers-lès-Nancy</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/pesto</ref>
          </desc>
          <listRelation>
            <relation active="#struct-129671" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-423084" type="direct"/>
            <relation active="#struct-206040" type="indirect"/>
            <relation active="#struct-411575" type="indirect"/>
            <relation active="#struct-413289" type="indirect"/>
            <relation name="UMR7503" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-1163181" status="INCOMING">
          <orgName>SandboxAQ</orgName>
          <desc>
            <address>
              <country key="US"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300856" status="VALID">
          <idno type="IdRef">112681611</idno>
          <idno type="ROR">https://ror.org/016xsfp80</idno>
          <orgName>Radboud University [Nijmegen]</orgName>
          <desc>
            <address>
              <addrLine>Houtlaan 4, 6525 XZ Nijmegen</addrLine>
              <country key="NL"/>
            </address>
            <ref type="url">https://www.ru.nl/en</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-34586" status="VALID">
          <idno type="RNSR">198318250R</idno>
          <idno type="ROR">https://ror.org/01nzkaw91</idno>
          <orgName>Centre Inria d'Université Côte d'Azur</orgName>
          <desc>
            <address>
              <addrLine>2004 route des Lucioles BP 93 06902 Sophia Antipolis</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/sophia/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-129671" status="VALID">
          <idno type="RNSR">198618246Y</idno>
          <idno type="ROR">https://ror.org/03fcjvn64</idno>
          <orgName>Centre Inria de l'Université de Lorraine</orgName>
          <desc>
            <address>
              <addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/nancy</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="department" xml:id="struct-423084" status="VALID">
          <orgName>Department of Formal Methods</orgName>
          <orgName type="acronym">LORIA - FM</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.loria.fr/en/research/departments/formal-methods/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-206040" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-411575" type="indirect"/>
            <relation active="#struct-413289" type="indirect"/>
            <relation name="UMR7503" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-206040" status="VALID">
          <idno type="IdRef">067077927</idno>
          <idno type="ISNI">0000000121795429</idno>
          <idno type="RNSR">198912571S</idno>
          <idno type="IdUnivLorraine">[UL]RSI--</idno>
          <idno type="ROR">https://ror.org/02vnf0c38</idno>
          <orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName>
          <orgName type="acronym">LORIA</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.loria.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
            <relation active="#struct-411575" type="direct"/>
            <relation active="#struct-413289" type="direct"/>
            <relation name="UMR7503" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-411575" status="VALID">
          <idno type="IdRef">184443237</idno>
          <idno type="ROR">https://ror.org/019tcpt25</idno>
          <orgName>CentraleSupélec</orgName>
          <desc>
            <address>
              <addrLine>3, rue Joliot Curie,Plateau de Moulon,91192 GIF-SUR-YVETTE Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.centralesupelec.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-413289" status="VALID">
          <idno type="IdRef">157040569</idno>
          <idno type="IdUnivLorraine">[UL]100--</idno>
          <idno type="ROR">https://ror.org/04vfs2w97</idno>
          <orgName>Université de Lorraine</orgName>
          <orgName type="acronym">UL</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>34 cours Léopold - CS 25233 - 54052 Nancy cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lorraine.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-69633" status="VALID">
          <idno type="anr">ANR-22-PECY-0006</idno>
          <orgName>SVP</orgName>
          <desc>Verification of Security Protocols</desc>
          <date type="start">2022</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>