Trustworthy Systems

Verified compilation on a verified processor


Andreas Lööw, Ramana Kumar, Yong Kiam Tan, Magnus Myreen, Michael Norrish, Oskar Abrahamsson and Anthony Fox

Arm Limited

Carnegie Mellon University


Chalmers University


Chalmers University of Technology

Australian National University


Developing technology for building verified stacks, i.e., computer systems with comprehensive proofs of correctness, is one way the science of programming languages furthers the computing discipline. While there have been successful projects verifying complex, realistic system components, including compilers (software) and processors (hardware), to date these verification efforts have not been compatible to the point of enabling a single end-to-end correctness theorem about running a verified compiler on a verified processor. In this paper we show how to extend the trustworthy development methodology of the CakeML project, including its verified compiler, with a connection to verified hardware. Our hardware target is Silver, a verified proof-of-concept processor that we introduce here. The result is an approach to producing verified stacks that scales to proving correctness, at the hardware level, of the execution of realistic software including compilers and proof checkers. Alongside our hardware-level theorems, we demonstrate feasibility by hosting and running our verified artefacts on an FPGA board.

BibTeX Entry

    address          = {Phoenix, Arizona, United States of America},
    author           = {L\"{o}\"{o}w, Andreas and Kumar, Ramana and Tan, Yong Kiam and Myreen, Magnus and Norrish, Michael
                        and Abrahamsson, Oskar and Fox, Anthony},
    booktitle        = {ACM SIGPLAN Conference on Programming Language Design and Implementation},
    date             = {2019-6-24},
    doi              = {},
    month            = jun,
    pages            = {1041-1053},
    paperurl         = {},
    publisher        = {ACM},
    title            = {Verified Compilation on a Verified Processor},
    year             = {2019}