Link formal verification results (#899)

This commit is contained in:
Michael Rosenberg 2026-04-20 02:03:45 -04:00 committed by GitHub
parent fc23dd4a86
commit eb7df80805
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -234,6 +234,17 @@ inappropriate CPU would cause `SIGILL`, but the entire backend is only
invoked when the appropriate CPU features are detected at runtime, or
when the whole program is compiled with the appropriate `target_feature`s.
## Formal Verification
<a href="https://verilib.org/cert/5132">
<img
alt="the word 'certified', next to a checkmark"
width="100px"
src="https://verilib.org/assets/img/Badge%20-%20Wide-4x.png"/>
</a>
A large chunk of `curve25519-dalek` has been formally verified with [Verus](https://verus-lang.github.io/verus/guide/). Specifically, the 280 Rust functions in version 4.1.3 of `curve25519-dalek` that are used directly or indirectly by the Signal Messenger app. For more details on what was verified and with which assumptions, see the VeriLib page [here](https://verilib.org/cert/5132).
# Performance
Benchmarks are run using [`criterion.rs`][criterion]: