{"id":"https://openalex.org/W3189992245","doi":"https://doi.org/10.1109/csf51468.2021.00023","title":"A Coq proof of the correctness of X25519 in TweetNaCl","display_name":"A Coq proof of the correctness of X25519 in TweetNaCl","publication_year":2021,"publication_date":"2021-06-01","ids":{"openalex":"https://openalex.org/W3189992245","doi":"https://doi.org/10.1109/csf51468.2021.00023","mag":"3189992245"},"language":"en","primary_location":{"id":"doi:10.1109/csf51468.2021.00023","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csf51468.2021.00023","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 34th Computer Security Foundations Symposium (CSF)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074344027","display_name":"Peter Schwabe","orcid":"https://orcid.org/0000-0002-1310-0997"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]},{"id":"https://openalex.org/I4210096592","display_name":"Max Planck Institute for Security and Privacy","ror":"https://ror.org/00bj0r217","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210096592"]}],"countries":["DE","NL"],"is_corresponding":false,"raw_author_name":"Peter Schwabe","raw_affiliation_strings":["Germany & Radboud University,MPI-SP,The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Germany & Radboud University,MPI-SP,The Netherlands","institution_ids":["https://openalex.org/I4210096592","https://openalex.org/I145872427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055469440","display_name":"Beno\u00eet Viguier","orcid":"https://orcid.org/0000-0002-8943-5080"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Beno\u00eet Viguier","raw_affiliation_strings":["Radboud University,The Netherlands","Radboud University, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University,The Netherlands","institution_ids":["https://openalex.org/I145872427"]},{"raw_affiliation_string":"Radboud University, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088449345","display_name":"Timmy Weerwag","orcid":"https://orcid.org/0000-0002-3993-7541"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]},{"id":"https://openalex.org/I7876267","display_name":"Open University of the Netherlands","ror":"https://ror.org/018dfmf50","country_code":"NL","type":"education","lineage":["https://openalex.org/I7876267"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Timmy Weerwag","raw_affiliation_strings":["Radboud University & Open University,Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University & Open University,Netherlands","institution_ids":["https://openalex.org/I145872427","https://openalex.org/I7876267"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034010131","display_name":"Freek Wiedijk","orcid":null},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Freek Wiedijk","raw_affiliation_strings":["Radboud University,The Netherlands","Radboud University, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University,The Netherlands","institution_ids":["https://openalex.org/I145872427"]},{"raw_affiliation_string":"Radboud University, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"16"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/toolchain","display_name":"Toolchain","score":0.7534565925598145},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6823881268501282},{"id":"https://openalex.org/keywords/proof-assistant","display_name":"Proof assistant","score":0.67707359790802},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.6762295365333557},{"id":"https://openalex.org/keywords/automated-theorem-proving","display_name":"Automated theorem proving","score":0.6422484517097473},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6346054077148438},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.6309223175048828},{"id":"https://openalex.org/keywords/gas-meter-prover","display_name":"Gas meter prover","score":0.615389883518219},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5714601874351501},{"id":"https://openalex.org/keywords/hol","display_name":"HOL","score":0.4981038570404053},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.4308406114578247},{"id":"https://openalex.org/keywords/key-exchange","display_name":"Key exchange","score":0.425933301448822},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4044369161128998},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.3807825446128845},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3757610619068146},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.345526784658432},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.2927864193916321},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.28459057211875916},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.27400901913642883},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.19807612895965576},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18843406438827515}],"concepts":[{"id":"https://openalex.org/C2777062904","wikidata":"https://www.wikidata.org/wiki/Q545406","display_name":"Toolchain","level":3,"score":0.7534565925598145},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6823881268501282},{"id":"https://openalex.org/C203265346","wikidata":"https://www.wikidata.org/wiki/Q11387554","display_name":"Proof assistant","level":3,"score":0.67707359790802},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.6762295365333557},{"id":"https://openalex.org/C206880738","wikidata":"https://www.wikidata.org/wiki/Q431667","display_name":"Automated theorem proving","level":2,"score":0.6422484517097473},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6346054077148438},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.6309223175048828},{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.615389883518219},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5714601874351501},{"id":"https://openalex.org/C17435882","wikidata":"https://www.wikidata.org/wiki/Q17030435","display_name":"HOL","level":2,"score":0.4981038570404053},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.4308406114578247},{"id":"https://openalex.org/C99674996","wikidata":"https://www.wikidata.org/wiki/Q1414155","display_name":"Key exchange","level":4,"score":0.425933301448822},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4044369161128998},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.3807825446128845},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3757610619068146},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.345526784658432},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2927864193916321},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.28459057211875916},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.27400901913642883},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.19807612895965576},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18843406438827515},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/csf51468.2021.00023","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csf51468.2021.00023","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 34th Computer Security Foundations Symposium (CSF)","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/236529","is_oa":false,"landing_page_url":"https://hdl.handle.net/2066/236529","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article in monograph or in proceedings"},{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/236529","is_oa":false,"landing_page_url":"http://hdl.handle.net/2066/236529","pdf_url":null,"source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"CSF 2021: 34th IEEE Computer Security Foundations Symposium, June 21-25. 2021 - Virtual Conference, 529 - 544. Los Alamitos : IEEE","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W121484200","https://openalex.org/W186684821","https://openalex.org/W565531337","https://openalex.org/W1537642804","https://openalex.org/W1910751411","https://openalex.org/W1971605365","https://openalex.org/W2067081213","https://openalex.org/W2137628566","https://openalex.org/W2148662736","https://openalex.org/W2151385722","https://openalex.org/W2161080229","https://openalex.org/W2181293862","https://openalex.org/W2183096388","https://openalex.org/W2407740922","https://openalex.org/W2460965380","https://openalex.org/W2515547981","https://openalex.org/W2594174595","https://openalex.org/W2604664164","https://openalex.org/W2751246305","https://openalex.org/W2767162229","https://openalex.org/W2779091378","https://openalex.org/W2792757320","https://openalex.org/W2908643315","https://openalex.org/W2928036819","https://openalex.org/W2964540713","https://openalex.org/W2987907651","https://openalex.org/W3015689716","https://openalex.org/W3016059855","https://openalex.org/W3034103899","https://openalex.org/W3146075203","https://openalex.org/W3198061885","https://openalex.org/W6632446787","https://openalex.org/W6685359154","https://openalex.org/W6713761476","https://openalex.org/W6718621806","https://openalex.org/W6766506599","https://openalex.org/W6772849236"],"related_works":["https://openalex.org/W4295798319","https://openalex.org/W1819460135","https://openalex.org/W3098927713","https://openalex.org/W2124145386","https://openalex.org/W2535018452","https://openalex.org/W1516654960","https://openalex.org/W4289109288","https://openalex.org/W2888810578","https://openalex.org/W4289666903","https://openalex.org/W1909465604"],"abstract_inverted_index":{"We":[0,18,51],"formally":[1,53],"prove":[2,19],"that":[3,21,63,69],"the":[4,8,13,25,39,57,76,86,92,100],"C":[5,95],"implementation":[6],"of":[7,41,59],"X25519":[9,64],"key-exchange":[10],"protocol":[11,26],"in":[12,33],"TweetNaCl":[14],"library":[15],"is":[16,65],"correct.":[17],"both":[20],"it":[22,70],"correctly":[23,71],"implements":[24],"from":[27],"Bernstein's":[28],"2006":[29],"paper,":[30],"as":[31,36,38],"standardized":[32],"RFC":[34],"7748,":[35],"well":[37],"absence":[40],"undefined":[42],"behavior":[43],"like":[44],"arithmetic":[45],"overflows":[46],"and":[47,61,96],"array":[48],"out-of-bounds":[49],"errors.":[50],"also":[52],"prove,":[54],"based":[55],"on":[56,75],"work":[58],"Bartzia":[60],"Strub,":[62],"mathematically":[66],"correct,":[67],"i.e.,":[68],"computes":[72],"scalar":[73],"multiplication":[74],"elliptic":[77],"curve":[78],"Curve25519.":[79],"The":[80],"proofs":[81],"are":[82],"all":[83],"computer-verified":[84],"using":[85],"Coq":[87,97],"theorem":[88],"prover.":[89],"To":[90],"establish":[91],"link":[93],"between":[94],"we":[98],"use":[99],"Verified":[101],"Software":[102],"Toolchain":[103],"(VST).":[104]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}