Developer Moves TLS 1.3 Crypto Fully Into Experimental Verbose Language, Eliminating Python Fallbacks
A developer building Verbose, an experimental compiled language with formal correctness proofs, discovered that six cryptographic computations in its TLS 1.3 implementation were still running in Python rather than in Verbose-emitted binaries, contradicting the project's own design specification. The six operations — nonce generation, authenticated header construction, initial counter block, length block, tag computation, and constant-time tag comparison — were small but security-critical, as errors in any of them could allow forged messages to pass verification. The violation was documented transparently in the design document itself, with a new section explicitly marking the original claim as false rather than silently correcting it. Once Verbose gained the ability to return fixed-width multi-field records from rules, all six computations could be expressed as native Verbose rules with purity and termination proofs. The migration, completed in PR #199, required no compiler changes — only 178 lines of new tests — confirming the language already had the necessary capabilities.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.



Discussion (0)
Log in to join the discussion and vote.
Log in