{"id":"https://openalex.org/W7106327740","doi":"https://doi.org/10.1109/sp63933.2026.00026","title":"The Secrets Must Not Flow: Scaling Security Verification to Large Codebases","display_name":"The Secrets Must Not Flow: Scaling Security Verification to Large Codebases","publication_year":2026,"publication_date":"2026-05-18","ids":{"openalex":"https://openalex.org/W7106327740","doi":"https://doi.org/10.1109/sp63933.2026.00026"},"language":null,"primary_location":{"id":"doi:10.1109/sp63933.2026.00026","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp63933.2026.00026","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2507.00595","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Linard Arquint","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Linard Arquint","raw_affiliation_strings":["ETH Zurich,Department of Computer Science,Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich,Department of Computer Science,Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Samarth Kishor","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Samarth Kishor","raw_affiliation_strings":["Amazon Web Services,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services,USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jason R. Koenig","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason R. Koenig","raw_affiliation_strings":["Amazon Web Services,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services,USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Joey Dodds","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joey Dodds","raw_affiliation_strings":["Amazon Web Services,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services,USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Daniel Kroening","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Kroening","raw_affiliation_strings":["Amazon Web Services,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services,USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"last","author":{"id":null,"display_name":"Peter M\u00fcller","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Peter M\u00fcller","raw_affiliation_strings":["ETH Zurich,Department of Computer Science,Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich,Department of Computer Science,Switzerland","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1822","last_page":"1841"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6563000082969666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6563000082969666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.18310000002384186,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.04149999842047691,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/codebase","display_name":"Codebase","score":0.9021000266075134},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5641999840736389},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5174999833106995},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5160999894142151},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.42890000343322754},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.38089999556541443},{"id":"https://openalex.org/keywords/key-exchange","display_name":"Key exchange","score":0.3700000047683716},{"id":"https://openalex.org/keywords/secrecy","display_name":"Secrecy","score":0.3594000041484833}],"concepts":[{"id":"https://openalex.org/C51929080","wikidata":"https://www.wikidata.org/wiki/Q2425187","display_name":"Codebase","level":3,"score":0.9021000266075134},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8817999958992004},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5641999840736389},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5174999833106995},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5160999894142151},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.42890000343322754},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.38089999556541443},{"id":"https://openalex.org/C99674996","wikidata":"https://www.wikidata.org/wiki/Q1414155","display_name":"Key exchange","level":4,"score":0.3700000047683716},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.3537999987602234},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3465000092983246},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.34369999170303345},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.33980000019073486},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3199000060558319},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.3156000077724457},{"id":"https://openalex.org/C15569618","wikidata":"https://www.wikidata.org/wiki/Q3561421","display_name":"Liveness","level":2,"score":0.3009999990463257},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.299699991941452},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.29760000109672546},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2694000005722046},{"id":"https://openalex.org/C15845906","wikidata":"https://www.wikidata.org/wiki/Q1172338","display_name":"Data exchange","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C205009425","wikidata":"https://www.wikidata.org/wiki/Q935662","display_name":"Forward secrecy","level":4,"score":0.2605000138282776},{"id":"https://openalex.org/C28420585","wikidata":"https://www.wikidata.org/wiki/Q2665075","display_name":"Timing attack","level":4,"score":0.2599000036716461}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sp63933.2026.00026","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp63933.2026.00026","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2507.00595","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2507.00595","pdf_url":"https://arxiv.org/pdf/2507.00595","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2507.00595","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2507.00595","pdf_url":"https://arxiv.org/pdf/2507.00595","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6732020378112793}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7106327740.pdf","grobid_xml":"https://content.openalex.org/works/W7106327740.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Existing":[0],"program":[1,208],"verifiers":[2],"can":[3,135],"prove":[4],"advanced":[5],"properties":[6,85],"about":[7,200],"security":[8,84,146],"protocol":[9,42,185],"implementations,":[10],"but":[11],"are":[12,107],"difficult":[13],"to":[14,16,55,61,72,140],"scale":[15,69],"large":[17,175],"codebases":[18],"because":[19],"of":[20,109,144,167,199,202],"the":[21,38,41,47,62,70,73,79,83,88,101,105,110,119,122,138,145,168,203,206],"manual":[22,151],"effort":[23],"required.":[24],"We":[25,125,158],"develop":[26],"a":[27,174,182,197],"novel":[28],"methodology":[29],"called":[30],"*Diodon*":[31],"that":[32,78,94,100,118,133,150],"addresses":[33],"this":[34],"challenge":[35],"by":[36,76,95,130,195],"splitting":[37],"codebase":[39,75,180],"into":[40],"implementation":[43,166],"(the":[44,49],"*Core*)":[45],"and":[46,117,148,153,173,191],"remainder":[48],"*Application*).":[50],"This":[51],"split":[52],"allows":[53],"us":[54],"apply":[56],"powerful":[57],"semi-automated":[58],"verification":[59,71,152],"techniques":[60],"security-critical":[63],"Core,":[64],"while":[65],"fully-automatic":[66],"static":[67,91,154],"analyses":[68,92,155],"entire":[74],"ensuring":[77],"Application":[80,106,120,139],"cannot":[81],"invalidate":[82],"proved":[86,127],"for":[87,186],"Core.":[89],"The":[90],"achieve":[93],"proving":[96],"*I/O":[97],"independence*,":[98],"i.e.,":[99],"I/O":[102,142],"operations":[103],"within":[104],"independent":[108,143],"Core's":[111,123],"security-relevant":[112],"data":[113],"(such":[114],"as":[115],"keys),":[116],"meets":[121],"requirements.":[124],"have":[126],"Diodon":[128,160],"sound":[129],"first":[131],"showing":[132],"we":[134,188],"safely":[136],"allow":[137],"perform":[141],"protocol,":[147],"second":[149],"soundly":[156],"compose.":[157],"evaluate":[159],"on":[161],"two":[162],"case":[163],"studies:":[164],"an":[165],"signed":[169],"Diffie-Hellman":[170],"key":[171,183],"exchange":[172,184],"(100k+":[176],"LoC)":[177],"production":[178],"Go":[179],"implementing":[181],"which":[187],"obtained":[189],"secrecy":[190],"injective":[192],"agreement":[193],"guarantees":[194],"verifying":[196],"Core":[198],"1%":[201],"code":[204],"with":[205],"auto-active":[207],"verifier":[209],"Gobra":[210],"in":[211],"less":[212],"than":[213],"three":[214],"person":[215],"months.":[216]},"counts_by_year":[],"updated_date":"2026-07-15T05:50:42.429089","created_date":"2025-11-23T00:00:00"}