{"id":"https://openalex.org/W3082765557","doi":"https://doi.org/10.1145/3421473.3421477","title":"Simple High-Level Code For Cryptographic Arithmetic","display_name":"Simple High-Level Code For Cryptographic Arithmetic","publication_year":2020,"publication_date":"2020-08-31","ids":{"openalex":"https://openalex.org/W3082765557","doi":"https://doi.org/10.1145/3421473.3421477","mag":"3082765557"},"language":"en","primary_location":{"id":"doi:10.1145/3421473.3421477","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3421473.3421477","pdf_url":null,"source":{"id":"https://openalex.org/S50071195","display_name":"ACM SIGOPS Operating Systems Review","issn_l":"0163-5980","issn":["0163-5980","1943-586X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGOPS Operating Systems Review","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082766906","display_name":"Andres Erbsen","orcid":"https://orcid.org/0000-0002-9854-7500"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Andres Erbsen","raw_affiliation_strings":["MIT CSAIL"],"affiliations":[{"raw_affiliation_string":"MIT CSAIL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001020063","display_name":"Jade Philipoom","orcid":"https://orcid.org/0000-0003-0709-8218"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jade Philipoom","raw_affiliation_strings":["MIT CSAIL"],"affiliations":[{"raw_affiliation_string":"MIT CSAIL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011528055","display_name":"Jason Gross","orcid":"https://orcid.org/0000-0002-9427-4891"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jason Gross","raw_affiliation_strings":["MIT CSAIL"],"affiliations":[{"raw_affiliation_string":"MIT CSAIL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078127997","display_name":"Robert H. Sloan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert Sloan","raw_affiliation_strings":["MIT CSAIL"],"affiliations":[{"raw_affiliation_string":"MIT CSAIL","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078100439","display_name":"Adam Chlipala","orcid":"https://orcid.org/0000-0001-7085-9417"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Adam Chlipala","raw_affiliation_strings":["MIT CSAIL"],"affiliations":[{"raw_affiliation_string":"MIT CSAIL","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5082766906"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4078,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.69937481,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"54","issue":"1","first_page":"23","last_page":"30"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.987500011920929,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8637996912002563},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.60495924949646},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.5781581401824951},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5427612662315369},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5266513824462891},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.5167517066001892},{"id":"https://openalex.org/keywords/elliptic-curve-cryptography","display_name":"Elliptic curve cryptography","score":0.41598251461982727},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.41568759083747864},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.4134366810321808},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.412763386964798},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.40055081248283386},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.3547486662864685},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.29453784227371216},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.19511333107948303},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.16467159986495972},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.11680591106414795},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.11617672443389893}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8637996912002563},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.60495924949646},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.5781581401824951},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5427612662315369},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5266513824462891},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.5167517066001892},{"id":"https://openalex.org/C167615521","wikidata":"https://www.wikidata.org/wiki/Q1048911","display_name":"Elliptic curve cryptography","level":4,"score":0.41598251461982727},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.41568759083747864},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.4134366810321808},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.412763386964798},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.40055081248283386},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.3547486662864685},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.29453784227371216},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.19511333107948303},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.16467159986495972},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.11680591106414795},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.11617672443389893},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3421473.3421477","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3421473.3421477","pdf_url":null,"source":{"id":"https://openalex.org/S50071195","display_name":"ACM SIGOPS Operating Systems Review","issn_l":"0163-5980","issn":["0163-5980","1943-586X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGOPS Operating Systems Review","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4300000071525574,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1548641602","display_name":null,"funder_award_id":"CCF-1253229","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3185275164","display_name":"CAREER: A Formal Verification Platform Focused on Programmer Productivity","funder_award_id":"1253229","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3408632036","display_name":"SHF: Medium: Fiat: Correct-by-Construction and Mostly Automated Derivation of Programs with an Interactive Theorem Prover","funder_award_id":"1512611","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G529548107","display_name":null,"funder_award_id":"CCF-1521584","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8418705754","display_name":null,"funder_award_id":"CCF-1512611","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1434079718","https://openalex.org/W1910751411","https://openalex.org/W2019120991","https://openalex.org/W2055477538","https://openalex.org/W2073742357","https://openalex.org/W2091776255","https://openalex.org/W2136310957","https://openalex.org/W2151385722","https://openalex.org/W2515547981","https://openalex.org/W2576393274","https://openalex.org/W2578546025","https://openalex.org/W2761236351","https://openalex.org/W2761718075","https://openalex.org/W2767162229","https://openalex.org/W2898707257","https://openalex.org/W2898893133","https://openalex.org/W2928036819","https://openalex.org/W2974073952"],"related_works":["https://openalex.org/W3008339103","https://openalex.org/W2404647514","https://openalex.org/W1667647204","https://openalex.org/W4247536566","https://openalex.org/W3119814709","https://openalex.org/W55831818","https://openalex.org/W2772436979","https://openalex.org/W2484747202","https://openalex.org/W4388857716","https://openalex.org/W4322486674"],"abstract_inverted_index":{"We":[0,19,159],"introduce":[1],"an":[2,63,145],"unusual":[3],"approach":[4],"for":[5,70,132,138],"implementing":[6],"cryptographic":[7],"arithmetic":[8],"in":[9,125,134,154,165],"short":[10],"high-level":[11],"code":[12,32],"with":[13,88],"machinechecked":[14],"proofs":[15],"of":[16,74,93,111,148,167],"functional":[17,173],"correctness.":[18],"further":[20],"demonstrate":[21],"that":[22,42,66,82],"simple":[23],"partial":[24],"evaluation":[25],"is":[26,144],"sufficient":[27],"to":[28,61,127],"transform":[29],"such":[30],"initial":[31],"into":[33],"highly":[34],"competitive":[35,68],"C":[36],"code,":[37,131],"breaking":[38],"the":[39,43,89,106,113,149,171],"decades-old":[40],"pattern":[41],"only":[44],"fast":[45],"implementations":[46],"are":[47],"those":[48],"whose":[49],"instruction-level":[50],"steps":[51],"were":[52,59,123],"written":[53],"out":[54],"by":[55],"hand.":[56],"These":[57],"techniques":[58],"used":[60,116],"build":[62],"elliptic-curve":[64],"library":[65,122],"achieves":[67],"performance":[69],"a":[71,168],"wide":[72],"range":[73],"prime":[75],"fields":[76],"and":[77,84,91,141],"multiple":[78],"CPU":[79],"architectures,":[80],"showing":[81],"implementation":[83,110],"proof":[85],"effort":[86],"scales":[87],"number":[90],"complexity":[92],"conceptually":[94],"different":[95],"algorithms,":[96],"not":[97],"their":[98],"use":[99],"cases.":[100],"As":[101],"one":[102],"outcome,":[103],"we":[104],"present":[105],"first":[107],"verified":[108],"highperformance":[109],"P-256,":[112],"most":[114,162],"widely":[115],"elliptic":[117],"curve.":[118],"Implementations":[119],"from":[120],"our":[121],"included":[124],"BoringSSL":[126],"replace":[128],"existing":[129],"specialized":[130],"inclusion":[133],"several":[135],"large":[136],"deployments":[137],"Chrome,":[139],"Android,":[140],"CloudFlare.":[142],"This":[143],"abridged":[146],"version":[147],"full":[150],"paper":[151],"originally":[152],"presented":[153],"IEEE":[155],"S&amp;P":[156],"2019":[157],"[10].":[158],"have":[160],"omitted":[161],"proof-engineering":[163],"details":[164],"favor":[166],"focus":[169],"on":[170],"system's":[172],"capabilities.":[174]},"counts_by_year":[{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3}],"updated_date":"2026-04-21T08:09:41.155169","created_date":"2025-10-10T00:00:00"}
