Skip to content
STIMSMITH
← prev 2026-07-06 next →

2026-07-06

6 items 267 entities 309 connections

Processed 60 entities and 61 relations.

μCFI: Formal Verification of Microarchitectural Control-flow Integrity Katharina Ceesay-Seitz Flavien Solt Kaveh Razavi ETH Zurich Microarchitectural Control-Flow Integrity (μCFI) Constant-Time (CT) execution Control-Flow Integrity (CFI) Register Transfer Level (RTL) Information Flow Tracking (IFT) Formal Property Verification (FPV) taint tracking Program Counter (PC) Instruction Under Verification (IUV) microarchitectural control flow (μCF) declassification of legal flows Instruction Operand Constraint (IOC) taint injection hardware fuzzing timing side-channel attack data-independent execution latency logic abstraction model checking non-influencing (ni) instructions control-influencing (ci) instructions value-influencing (vi) instructions forwarding paths RISC-V ISA pipeline CPU architecture General-Purpose Register (GPR) Control and Status Register (CSR) instruction word (IW) CellIFT CellDFT Jasper FPV Yosys Cascade CPU fuzzer SystemVerilog Assertions (SVA) precise taint injection data flow tracking (DFT) cell-level taint instrumentation static design analysis logic gate shadow logic instrumentation (GLIFT) RTLIFT μCFI verification toolchain Kronos RISC-V CPU PicoRV32 RISC-V CPU Ibex RISC-V CPU Scarv RISC-V CPU unbounded instruction sequence verification hardware security vulnerability CVE (Common Vulnerabilities and Exposures) control-flow hijack delay injection attack formal verification register file instruction operand shadow logic multiplexer select signal RISC-V Data-Independent Execution Latency (DIEL) mode