Security Components

This section covers Lotus components for side-channel analysis, speculative execution analysis, and mitigation-oriented program transformation.

Overview

At a glance:

• ConstantTime (lib/Security/ConstantTime): CT-LLVM-style constant-time analysis for secret-dependent side channels. See Constant-Time Analysis.

• LIF (lib/Security/LIF): Taint-guided isochronous transformation and control-flow linearization for side-channel mitigation. See LIF.

• Spectre (lib/Security/Spectre): Spectre-v1-style speculative cache analysis for secret-dependent cache behavior. See Spectre Cache Analysis.

These components complement the reusable analysis utilities documented under Analysis Framework and the checker-oriented front-ends documented under Checker Framework.

• Constant-Time Analysis
  • Overview
  • Main Components
  • Analysis Modes and Options
  • Leak Model
  • Usage
  • Related Components
  • Limitations
• LIF
  • Overview
  • Main Components
  • Transformation Strategy
  • Public API
  • Usage Notes
  • Related Components
• Spectre Cache Analysis
  • Overview
  • Main Components
  • Result Model
  • Usage
  • Related Components