35C3 - The year in post-quantum crypto
media.ccc.deYouTube ↗
Further reading 1
Caption notes
In this 2018 cryptography talk Bernstein describes verifying machine code for a fast sort. That choice removes one assumption about the compiler while leaving a precisely bounded claim about the implementation and its specification.
Community transcript ↗Original passages · 2
for every possible inputverification isn't going to rely on some compiler being correct.