Verifying Security Across Hardware & Software

This lecture covers the verification of security across hardware and software, including verified algorithms like SSL, TLS, and SHA used in major systems, as well as techniques for automatically eliminating speculative leaks and verifying distributed programs. It also discusses the application of Iodine to verify constant time for hardware, catching timing attacks via coloring, and the use of Blade to fix speculation bugs in software. The instructor presents benchmarks, assumptions, and challenges in verifying constant time for hardware, emphasizing the importance of making assumptions about hardware explicit to avoid bugs in verified software.