Experience in using a typed functional language for the development of a security application

TL;DR

This paper discusses the development of a security application using a typed functional language, emphasizing how formal semantics and compiler trustworthiness enhance security and correctness.

Contribution

It provides practical insights into using a typed functional language for security applications, highlighting benefits of formal grounding and compiler reliability.

Findings

Formal semantics improve security assurance

Typed functional language facilitates correct implementation

Compiler trustworthiness aids in fulfilling security specifications

Abstract

In this paper we present our experience in developing a security application using a typed functional language. We describe how the formal grounding of its semantic and compiler have allowed for a trustworthy development and have facilitated the fulfillment of the security specification.