Vantage

Companion tool for Leakage Containment is Relative: Parameterising Extra-Architectural State

A leakage contract states what a program may reveal to an adversary who watches microarchitectural state. Checking one requires deciding which piece of that state each event disturbs: which cache line, which TLB entry. Vantage makes that decision an explicit parameter, a keying, and decides contracts under it.

For a given contract, Vantage returns the verdict, evidence that the verdict is not vacuous, and the maximal keyings under which the contract survives. It is built on authoritative Arm and RISC-V Sail semantics with address-translation events.

Using the online instance

• Start page: the contract flow. Pick a program, choose or edit a contract and its keying, and run it. The corpus browser is at /browse.
• One analysis at a time. Runs are serialised on purpose. If another run is in progress, the page shows that yours is queued and replaces itself with the result when it is ready.
• Some analyses take minutes. Programs with address translation enumerate many executions; several minutes is normal. Keep the tab open; the page updates by itself.
• Corpus pages are cached. A corpus page that has already been computed opens immediately.

Precomputed results

A browsable set of precomputed results will be added here.