# Provable security

Published articles for Provable security.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## EC2's formally verified "isolation engine" provides mathematical assurance of virtual-machine isolation

DevFeed: [EC2's formally verified "isolation engine" provides mathematical assurance of virtual-machine isolation](<https://devfeed.tech/articles/ec2-s-formally-verified-isolation-engine-provides-mathematical-assurance-of-virtual-machine-isolation-7598.md>)

Original publisher: [Read original article](<https://www.amazon.science/blog/ec2s-formally-verified-isolation-engine-provides-mathematical-assurance-of-virtual-machine-isolation>)

Author: Dominic Mulligan; Nathan Chong

Published: 2026-06-10T15:00:00Z

Content type: article

Language: en

Sources: [Amazon Science homepage](<https://devfeed.tech/sources/amazon-science-homepage.md>)

Topics: [Amazon EC2](<https://devfeed.tech/topics/amazon-ec2.md>), [Rust formal verification](<https://devfeed.tech/topics/rust-formal-verification.md>)

Tags: [amazon-web-services-aws](<https://devfeed.tech/tags/amazon-web-services-aws.md>), [autocorrode-library](<https://devfeed.tech/tags/autocorrode-library.md>), [automated-reasoning](<https://devfeed.tech/tags/automated-reasoning.md>), [aws-graviton5-security](<https://devfeed.tech/tags/aws-graviton5-security.md>), [cloud-and-systems](<https://devfeed.tech/tags/cloud-and-systems.md>), [confidentiality-integrity-proofs](<https://devfeed.tech/tags/confidentiality-integrity-proofs.md>), [ec2-virtual-machine-security](<https://devfeed.tech/tags/ec2-virtual-machine-security.md>), [formal-verification](<https://devfeed.tech/tags/formal-verification.md>), [formally-verified-hypervisor](<https://devfeed.tech/tags/formally-verified-hypervisor.md>), [isabelle-hol-proof-assistant](<https://devfeed.tech/tags/isabelle-hol-proof-assistant.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [memory-safety-verification](<https://devfeed.tech/tags/memory-safety-verification.md>), [nitro-isolation-engine](<https://devfeed.tech/tags/nitro-isolation-engine.md>), [nitro-system](<https://devfeed.tech/tags/nitro-system.md>), [provable-security](<https://devfeed.tech/tags/provable-security.md>), [rust](<https://devfeed.tech/tags/rust.md>), [rust-formal-verification](<https://devfeed.tech/tags/rust-formal-verification.md>), [security](<https://devfeed.tech/tags/security.md>), [security-privacy-and-abuse-prevention](<https://devfeed.tech/tags/security-privacy-and-abuse-prevention.md>)

### AI overview

Amazon describes formally verifying the Nitro Isolation Engine, a separation-kernel component that enforces isolation between EC2 virtual machines. The verification uses Isabelle/HOL and is deployed as an always-on feature for Graviton5 users.

### Source excerpt

Splitting the "separation kernel" off from the rest of the Nitro security system and using only a subset of the Rust programming language to code it enabled its formal verification.

## Shipping an L1 zkEVM #2: The Security Foundations

DevFeed: [Shipping an L1 zkEVM #2: The Security Foundations](<https://devfeed.tech/articles/shipping-an-l1-zkevm-2-the-security-foundations-17201.md>)

Original publisher: [Read original article](<https://blog.ethereum.org/en/2025/12/18/zkevm-security-foundations>)

Author: George Kadianakis

Published: 2025-12-18T00:00:00Z

Content type: article

Language: en

Sources: [Ethereum Foundation Blog](<https://devfeed.tech/sources/ethereum-foundation-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Provable security](<https://devfeed.tech/topics/provable-security.md>), [Ethereum](<https://devfeed.tech/topics/ethereum.md>), [P2P](<https://devfeed.tech/topics/p2p.md>), [Tool](<https://devfeed.tech/topics/tool.md>)

Tags: [cryptography](<https://devfeed.tech/tags/cryptography.md>), [ethereum](<https://devfeed.tech/tags/ethereum.md>), [p2p](<https://devfeed.tech/tags/p2p.md>), [provable-security](<https://devfeed.tech/tags/provable-security.md>), [research](<https://devfeed.tech/tags/research.md>), [research-development](<https://devfeed.tech/tags/research-development.md>), [security](<https://devfeed.tech/tags/security.md>), [tool](<https://devfeed.tech/tags/tool.md>)

### AI overview

The Ethereum Foundation outlines security foundations for building a mainnet-grade L1 zkEVM after major improvements in real-time proving. It argues for provable security at a 128-bit target, describes the tension between security and proof size, and introduces soundcalc for consistent zkVM security assessments.

### Source excerpt

Thanks to Arantxa Zapico, Benedikt Wagner, and Dmitry Khovratovich from the EF cryptography team for their contributions, and to Ladislaus, Kev, Alex, and Marius for the careful review and feedback. The zkEVM ecosystem has been sprinting for a year. And it worked! We crossed the finish line for real-time...

## Threat Modeling Encrypted Databases

DevFeed: [Threat Modeling Encrypted Databases](<https://devfeed.tech/articles/threat-modeling-encrypted-databases-37035.md>)

Original publisher: [Read original article](<https://shostack.org/blog/threat-modeling-encrypted-databases/>)

Author: Adam

Published: 2017-07-06T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Databases](<https://devfeed.tech/topics/databases.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Provable security](<https://devfeed.tech/topics/provable-security.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [crypto](<https://devfeed.tech/tags/crypto.md>), [databases](<https://devfeed.tech/tags/databases.md>), [paper](<https://devfeed.tech/tags/paper.md>), [provable-security](<https://devfeed.tech/tags/provable-security.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This article summarizes a paper arguing that encrypted databases may not provide the security claimed against snapshot attackers. It explains that theoretical models may not capture the information revealed by compromised database systems or how attackers can infer plaintext data.

### Source excerpt

[no description provided]