Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Formal analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20

Solar Energy Research Institute for India and the United States (SERIIUS): Lessons and Results from a Binational Consortium

This book describes the development, functioning, and results of a successful binational program to promote significant scientific advances in Earth-abundant photovoltaics (PV) and concentrated solar power (CSP), advanced process/manufacturing technologies, multiscale modeling and reliability testing, and analysis of integrated solar energy systems. SERIIUS is a consortium between India and the United States dedicated to developing new solar technologies and assessing their potential impact in the two countries. The consortium consists of nearly 50 institutions including academia, national laboratories, and industry, with the goal of developing significant new technologies in all areas of solar deployment. In addition, the program focused on workforce development through graduate students, post-doctoral students, and an international exchange program. Particular emphasis was placed on the following efforts: creating disruptive technologies in PV and CSP through high-impact fundamental and applied research and development (R&D); identifying and quantifying the critical technical, economic, and policy issues for solar energy development and deployment in India; overcoming barriers to technology transfer by teaming research institutions and industry in an effective project structure; building a new platform for binational collaboration using a formalized R&D project structure, along with effective management, coordination, and decision processes; creating a sustainable network and workforce development program from which to build large collaborations and fostering a collaborative culture and outreach programs. This includes using existing and new methodologies for collaboration based on advanced electronic and web-based communication to facilitate functional international teams. The book summarizes the general lessons learned from these experiences.

14 SOLAR ENERGY↗

Quantum Simulation of the First-Quantized Pauli-Fierz Hamiltonian

We provide an explicit recursive divide-and-conquer approach for simulating quantum dynamics and derive a discrete first-quantized nonrelativistic QED Hamiltonian based on the many-particle Pauli-Fierz Hamiltonian. We apply this recursive divide-and-conquer algorithm to this Hamiltonian and compare it to a concrete simulation algorithm that uses qubitization. Our divide-and-conquer algorithm, using lowest-order Trotterization, scales for fixed grid spacing as O ~ ( Λ N 2 η 2 t 2 / ϵ ) for grid size N , η particles, simulation time t , field cutoff Λ , and error ϵ . Our qubitization algorithm scales as O ~ ( N ( η + N ) ( η + Λ 2 ) t log ( 1 / ϵ ) ) . This shows that even a naive partitioning and low-order splitting formula can yield, through our divide-and-conquer formalism, superior scaling to qubitization for large Λ . We compare the relative costs of these two algorithms on systems that are relevant for applications such as the spontaneous emission of photons and the photoionization of electrons. We observe that for different parameter regimes, one method can be favored over the other. Finally, we give new algorithmic and circuit-level techniques for gate optimization, including a new way of implementing a group of multicontrolled- X gates that can be used for better analysis of circuit cost. Published by the American Physical Society 2024

Mukhopadhyay, Priyanka (ORCID:0000000164639100)↗

ChemoGraph: Interactive Visual Exploration of the Chemical Space

Exploratory analysis of the chemical space is an important task in the field of cheminformatics. For example, in drug discovery research, chemists investigate sets of thousands of chemical compounds in order to identify novel yet structurally similar synthetic compounds to replace natural products. Manually exploring the chemical space inhabited by all possible molecules and chemical compounds is impractical, and therefore presents a challenge. To fill this gap, we present ChemoGraph, a novel visual analytics technique for interactively exploring related chemicals. In ChemoGraph, we formalize a chemical space as a hypergraph and apply novel machine learning models to compute related chemical compounds. It uses a database to find related compounds from a known space and a machine learning model to generate new ones, which helps enlarge the known space. Moreover, ChemoGraph highlights interactive features that support users in viewing, comparing, and organizing computationally identified related chemicals. With a drug discovery usage scenario and initial expert feedback from a case study, we demonstrate the usefulness of ChemoGraph.

chemical space exploration↗

Justice 40 Tool (J40 Tool) v1.0

The Justice 40 tool provides a quantitative framework to support decision-making around equitable energy interventions at the community level. The tool calculates the optimal portfolio of policy interventions that explicitly mitigates energy insecurity of an eligible population, by reducing its disproportionate energy burden. The place-based analysis assumes a spatial census tract-level resolution and distinguishes different sociodemographic groups within each tract. Instead of focusing on a specific technology, the underlying J40 model captures the combined effect of a set of policy interventions, currently including weatherization, rooftop solar, community solar and community wind. For each tract, the model chooses the optimal (least cost) combination of interventions to address the disproportionate burden, considering the specific population demographics and techno-economic potentials of technologies. Mathematically, this problem is formalized as an optimization model and formulated as a linear program.

Heleno, Miguel↗

Line coupling and line mixing effects on calculated widths of symmetric-top molecules with the k-degeneracy: A theoretical study of N 2 -, O 2 -, and air-broadened lines of CH 3 I

Calculations of the N 2 -, O 2 -, and air-broadened widths, together with their temperature dependence exponents have been made for transitions of CH 3 I in the ν 5 and ν 6 bands. The calculations are based on a semi-classical line shape formalism developed by the current authors through modifying and refining the Robert-Bonamy formalism. In recent years, we have applied this formalism for linear molecules, symmetric-top molecules with inversion symmetry, and asymmetric-top molecules. For symmetric-top molecules with the k degeneracy such as CH 3 I, the formalism has a new feature. In this case, one should consider each of the CH 3 I transitions labeled by k i or f ≠ 0 as a doublet. Then, one needs to consider the effects of the line mixing process between these two components. Furthermore, comparisons of our theoretical predictions with some data available demonstrate a very reasonable agreement. Finally, we propose new experiments at higher perturber pressures that would enable one to check the theoretically calculated relaxation matrices and to extend the analysis to the inter-doublet mixing effects.

74 ATOMIC AND MOLECULAR PHYSICS↗

Ultrabroadband infrared near-field spectroscopy and imaging of local resonators in percolative gold films

Percolation processes are ubiquitous in nature and are responsible for many critical phenomena such as first-order phase transitions and infectious epidemic networks. The optical properties of a percolative medium can generally be captured by the effective medium approximation (EMA) when the degree of percolation and the properties of the constituent materials are properly addressed. However, the important local collective responses of nanoclusters in the deep subwavelength regime are often only phenomenologically addressed in the standard EMA formalism. Additionally, a comprehensive method that measures local light–matter interactions and registers how the local responses influence global optical properties has yet to be established on a firm basis. In this paper, we use infrared nanoimaging/spectroscopy to investigate percolative gold films in the vicinity of the critical percolation threshold. We demonstrate experimentally and theoretically that the near-field spectra yield quantitative information of the characteristic length scale of the local gold clusters and their relative oscillator strengths. As a result, EMA analysis can be augmented with near-field nano-spectroscopy to yield better predictability of the far-field reflection spectrum at the corresponding spectral range.

36 MATERIALS SCIENCE↗

SAM Software Quality Assurance Plan Implementation and NQA-1 Assessment

The System Analysis Module (SAM) is an advanced and modern system analysis tool being developed at Argonne National Laboratory under the U.S. DOE Office of Nuclear Energy’s Nuclear Energy Advanced Modeling and Simulation (NEAMS) program. As a modern-day software, SAM development included efforts to follow best practices in software development. These best practices include version control using git, independent reviews of development activities, and detailed descriptions of developments and bug fixes using the GitLab issue and merge request system. In Fiscal Year 2023 (FY23), the SAM development team set out to formalize a Software Quality Assurance (SQA) program that allowed industry partners to credit the informal steps being taken by the SAM development team to ensure the quality of the software. As part of formalizing an SQA program, a SQA Plan (SQAP) was developed, implemented, and assessed. The SAM SQAP targets compliance with NQA-1-2008/2009 Addenda. The SQAP builds on the MOOSE SQAP and the Argonne SSQAPP while accounting for the needs of the multi-organization SAM development team. Modifications to the SAM repository structure, including a new testing system, updated test cases, and the development of an internal website, facilitate the implementation of the SAM SQAP. The initial assessment of the SAM SQAP indicated that the SAM SQAP was adequately and effectively implemented and additional work was required to improve the compliance of the SAM SQAP with NQA-1 2008/2009 Addenda. Several improvements to the SQAP have already been drafted to address these assessments and future work is planned to further improve the SAM SQAP in support of end-user needs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Watching the Watchers with Verified Formal-Assurance Tools (Abbreviated Final Report)

The “Watching the Watchers” project studied the problem of establishing assurance cases for tools that are used to assure other things. Specifically, we were interested in understanding the tools and techniques one could apply to software to build an assurance case to evaluate their applicability, difficulty, level of assurance provided, and scalability. To do so we chose a set of use cases of relevance to LLNL and our various DOE and non-DOE partners and developed demonstrators to perform this evaluation. Our key focal point was around additive manufacturing problems and assurance gaps that we identified in the additive manufacturing workflow from start to completion. We also explored other areas related to AI, data analysis, and concurrent programming. Follow-on research is planned to take our prototypes from this project and adapt and mature them to fit LLNL mission applications.

97 MATHEMATICS AND COMPUTING↗

Educating HPC Users in the use of advanced computing technology

We examine a multi-modal approach to educating and training users of an advanced computing technology testbed at the Institute for Advanced Computational Science at Stony Brook University. Ookami provides researchers worldwide with access to 176 Fujitsu A64FX compute nodes, this being the same processor technology powering the Japanese Fugaku supercomputer, the fastest computer in the world since June 2020. However, achieving high-performance on this Arm-based, leadership computing technology requires that users be familiar with details of computer architecture, performance analysis and modeling, and high-performance programming models that are commonly omitted in introductory programming courses. Indeed, regardless of their seniority, many of the testbed users are surprisingly unfamiliar with basic concepts such as vectorization, pipelining, latency/bandwidth, roofline models, computing energy/power, threads, and non-uniform memory access. These same concepts also pervade mainstream x86 technologies, so this is of widespread concern. Due to the national/global nature of our user community that is also very diverse in both discipline and experience, the inability to offer formal classes, and our experience that most people do not tend to read online documentation or training materials in sufficient depth, we have consciously employed multiple approaches that heavily emphasize (online) personal interactions and transfer of skills. Online documentation has been organized around best-practices and FAQs; twice-weekly hackathons and office hours via Zoom enable deep dives by both the team and the user community with multiple broad benefits; a Slack channel provides both real time and archived answers and discussions; and workshops, training and webinars target community needs as they arise. Furthermore, the perspective that these tools are being used in an educational setting rather than just for project communication makes them more effective and contributes to community success.

A64FX↗

Hydrogen wide area monitoring of LH2 releases

The characterization of liquid hydrogen (LH2) releases has been identified as an international research priority to expand the safe use of hydrogen as an energy carrier. The elucidation of LH2 release behavior will require the development of dispersion and other models, guided and validated by empirical field measurements such as those afforded by Hydrogen Wide Area Monitoring (HyWAM). HyWAM can be defined as the quantitative spatial and temporal three-dimensional monitoring of planned or unintentional hydrogen releases. With support provided through the FCH JU Prenormative Research for the Safe Use of Liquid Hydrogen (PRESLHY) program, HSE performed a series of LH2 releases to characterize the dispersion and pooling behavior of cold hydrogen releases. The NREL Sensor Laboratory developed a HyWAM system based upon a distributed array of point sensors that is amenable for profiling cold hydrogen plumes. The NREL Sensor Laboratory and HSE formally committed to collaborate on profiling the LH2 releases. This collaboration included the integration of the NREL HyWAM into the HSE LH2 release hardware. This was achieved through a deployment plan jointly developed by the NREL and HSE personnel. Under this plan, the NREL Sensor Laboratory provided multiple HyWAM modules that accommodated 32 sampling points for near-field hydrogen profiling during the HSE PRESLHY LH2 releases. The NREL HyWAM would be utilized throughout the LH2 release study performed under PRESLHY by HSE, including Work Package 3 (WP3—Release and Mixing--Rainout) and subsequent work packages (WP4—Ignition and WP5—Combustion). Under the auspices of the PRESLHY WP6 (Implementation), data and findings from the HSE LH2 Releases are to be made available to stakeholders in the hydrogen community. Comprehensive data analysis and dissemination is ongoing, but the integration of the NREL HyWAM into the HSE LH2 Release Apparatus and its performance as well as some key outcomes of the LH2 releases in WP3 are presented.

08 HYDROGEN↗

Multiple oxidation states of uranium stabilized by an O , N , O -ligand

Elements of the 5f row maintain a wide variety of oxidation states that have been exploited in synthesis, catalysis, and separations. Herein, we describe the complexation of an O,N,O chelator, ExPh, with uranium in the (IV) and (VI) (uranyl) oxidation states. These two uranium complexes, U(IV)ExPh and UO 2 ExPh, respectively, were characterized in the solid state via single-crystal X-ray diffraction (SC-XRD) analysis. Electrochemical studies using cyclic voltammetry were employed to investigate the multiple redox events associated with the U(IV) complex. Spectro-electrochemical analysis of U(IV)ExPh provided spectroscopic evidence of a stable U(V) species. Chemical oxidation of U(IV)ExPh allowed isolation of the U(V) complex, U(V)ExPh. All three stable uranium complexes produced in this study were characterized via IR, UV-vis and NMR spectroscopies, and micro-spectrophotometry. On the other hand, efforts to reduce U(IV)ExPh to the corresponding U(III) species or produce this putative complex directly from ExPh failed to yield an isolable product. The stabilization of three formal oxidation states of uranium, coupled with previous lanthanide-row results, paves the way for studies of ExPh and its analogues in minor actinide chemistry.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Effects of overlapping sources on cosmic shear estimation: Statistical sensitivity and pixel-noise bias

The next generation of dark-energy imaging surveys — so called “Stage-IV” surveys, such as that of the Rubin Observatory Legacy Survey of Space and Time (LSST) — will cross a threshold in the number density of detected sources on the sky that requires qualitatively different image analysis and measurement techniques compared to the current generation of Stage-III surveys. In Stage-IV surveys, a significant amount of the cosmologically useful information is due to sources whose images overlap with those of other sources on the sky. Here, we focus on the weak gravitational lensing probe, for which we expect the largest impact since the cosmic shear signal is primarily encoded in the estimated shapes of observed galaxies and thus directly impacted by overlaps. We introduce a framework based on the Fisher formalism to analyze the effect of the overlapping sources (“blending”) on the estimation of cosmic shear. This method gives concrete predictions for the minimum loss of information due to noise and blending for any choice of “deblending” scheme and shape-measurement algorithm. Our studies account for undetected sources but do not address their full effects and biases they may introduce. We use simulated images and predict this impact of blending for three surveys: the Dark Energy Survey (DES), the Hyper-Suprime Cam Subaru Strategic Program (HSC-SSP), and the Rubin LSST. Our methodology successfully estimates the statistical sensitivity to weak lensing for DES and HSC early results. For LSST, we present the expected loss in statistical sensitivity for the ten-year survey due to blending. We find that for approximately 62% of galaxies that are likely to be detected in full-depth LSST images, at least 1% of the flux in their pixels is from overlapping sources. We also find that the statistical correlations between measures of overlapping galaxies and, to a much lesser extent (0.2%) the higher shot noise level due to their presence, decrease the effective number density of galaxies, N eff , by ~ 18%. We calculate an upper limit on N eff of 39.4 galaxies per arcmin 2 in r band. We study the impact of stars on as a function of stellar density and illustrate the diminishing returns of extending the survey into lower Galactic latitudes. We extend the simulation-based Fisher formalism to predict the expected increase in pixel-noise bias due to blending for maximum-likelihood (ML) shape estimators. We find that noise bias depends sensitively on the particular shape estimator and measure of ensemble-average shape that is used, and properties of the galaxy that include redshift-dependent quantities such as size and luminosity. The source code for these studies is available online.[The documented software developed for the catalog-level studies are available in the open-source LSST DESC github repository https://github.com/LSSTDESC/WeakLensingDeblending. The software for analyzing one or two galaxies with user-defined parameters is in the open-source github repository https://github.com/ismael-mendoza/ShapeMeasurementFisherFormalism.]

79 ASTRONOMY AND ASTROPHYSICS↗

LA100 Equity Strategies. Chapter 2: Procedural Justice

The LA100 Equity Strategies project synthesizes community guidance with robust research, modeling, and analysis to identify strategy options that can increase equitable outcomes in Los Angeles' clean energy transition. Grounded in the analysis of past and ongoing energy inequities and engagement with underserved communities, the project presents community-guided and community-tailored strategies that aim to operationalize recognition and procedural justice. This chapter focuses on procedural justice, examining priorities identified during the community engagement portion of the LA100 Equity Strategies project. This process, and our approach to partnering with community-based organizations (CBOs) and the communities they serve, was developed from the baseline analysis in Chapter 1, which centers on recognition justice, examining past and current inequities in LA. Recognition, procedural, and distributional justice are the three tenets of energy justice around which the LA100 Equity Strategies project is organized. Procedural justice prioritizes fair, equitable, and inclusive participation in the decision-making process. This tenet's practical application entails who is invited and able to participate, whose voices are considered as decisions are made, the co-development of procedures to inform this deliberative process, and who has access to formal measures of regulation and accountability. Engaging with Angelenos to examine the causes of inequities and identify impact areas and priorities that center community experiences, values, and goals represents a first step in developing energy equity strategies for the Los Angeles Department of Water and Power (LADWP) to achieve distributional justice - the just and equitable distribution of energy benefits and burdens in LA's energy transition. Equity, as community members insisted, is about making - and following through with - a commitment to prioritize historically underserved and overburdened communities. Community engagement is a principal method for operationalizing this commitment, guiding our analytic approach and potential equity strategies. Using procedural justice as an analytical tool, this chapter presents the LA100 Equity Strategies approach to community engagement from 2021 to 2023 and the results of this process in relation to community-identified barriers and burdens impacting procedural justice outcomes. We analyze the procedural elements of reaching the equity goals Angelenos set to inform future LADWP decision-making and program development.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Background independent quantum field theory and gravitating vacuum fluctuations

The scale dependent effective average action for quantum gravity complies with the fundamental principle of Background Independence. Ultimately the background metric it formally depends on is selected self-consistently by means of a tadpole condition, a generalization of Einstein’s equation. Self-consistent background spacetimes are scale dependent, and therefore “going on-shell” at the points along a given renormalization group (RG) trajectory requires understanding two types of scale dependencies: the (familiar) direct one carried by the off-shell action functional, and an equally important indirect one related to the continual re-adjustment of the background geometry. This paper is devoted to a careful delineation and analysis of certain general questions concerning the indirect scale dependence, as well as a detailed explicit investigation of the case where the self-consistent metrics are determined predominantly by the RG running of the cosmological constant. Mathematically, the object of interest is the spectral flow induced by the background Laplacian which, on-shell, acquires an explicit scale dependence. Among other things, it encodes the complete information about the specific set of field modes which, at any given scale, are the degrees of freedom constituting the respective effective field theory. For a large class of RG trajectories (Type IIIa) we discover a seemingly paradoxical behavior that differs substantially from the off-shell based expectations: A Background Independent theory of (matter coupled) quantum gravity looses rather than gains degrees of freedom at increasing energies. As an application, we investigate to what extent it is possible to reformulate the exact theory in terms of matter and gravity fluctuations on a rigid flat space. It turns out that, in vacuo, this “rigid picture” breaks down after a very short RG time already (less than one decade of scales) because of a “scale horizon” that forms. Furthermore, we critically reanalyze and refute the frequent claim that the huge energy densities one obtains in standard quantum field theory by summing up to zero-point energies imply a naturalness problem for the observed small value of the cosmological constant.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗

Yb Substitution and Ultralow Thermal Conductivity of the Ca 3– x Yb x AlSb 3 (0 ≤ x ≤ 0.81(1)) System

Here, a series of Yb-substituted Zintl phases in the Ca 3–x Yb x AlSb 3 (0 ≤ x ≤ 0.81(1)) system has been synthesized by initial arc melting and post-heat treatment, and their isotypic crystal structures were characterized by both powder and single crystal X-ray diffraction analysis. All four title compounds adopted the Ca 3 AlAs 3 -type structure (space group Pnma, Pearson code oP28, Z = 4). The overall structure can be described as a combination of the 1-dimensional (1D) infinite chain of ∞ 1 [Al(Sb 2 Sb 2/2 )] formed by two vertices sharing [AlSb 4 ] tetrahedral moieties and three Ca 2+ /Yb 2+ mixed sites located in between these 1D chains. The charge balance and the resultant independency of the 1D chains in the title system were explained by the Zintl-Klemm formalism [Ca 2+ /Yb 2+ ] 3 [(4b-Al 1– )(1b-Sb 2– ) 2 (2b-Sb 1– ) 2/2 ]. A series of DFT calculations proved that (1) the band overlap between the d-orbital states from two types of cations and the p-orbital states from Sb at the high symmetry Γ point implied a heavily doped degenerate semiconducting behavior of the quaternary Ca 2 YbAlSb 3 model and (2) the site preference of Yb for the M1 site was due to the electronic-factor criterion based on the Q values of each atomic site. The electron localization function calculations also proved that the two different shapes of lone pairs of the Sb atoms—the “umbrella-shape” and the “C-shape”—are determined by local geometry and the coordination environment on the anionic frameworks. Thermoelectric measurements of the quaternary title compound Ca 2.19(1) Yb 0.81 AlSb 3 showed an approximately two times larger ZT value than that of ternary Ca 3 AlSb 3 at 623 K due to increased electrical conductivity and ultralow thermal conductivity originated from Yb substitution for Ca.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Crack Stability in Breached Fuel

This report describes the fracture mechanics formalism to evaluate the stability of cracks in a fuel cladding. Recognized consensus-body linear elastic fracture mechanics (LEFM) was applied to identify the crack instability length, or the length at which unstable mechanical crack extension would occur, as a function of pellet swelling loading (radial strain and fraction conversion from UO 2 to U 3 O 8 ) at the local cracked cladding region for two postulated fracture toughness (K IC ) values of the cladding. The crack opening displacement (COD) and the crack opening area (COA) were also identified. This analysis informs evaluations for crack extension and the potential for pellet debris loss from the fuel rod for cases of pellet oxidation in dry storage canisters where inadvertent residual water may undergo radiolysis causing oxidizing conditions to pellets exposed to the canister environment through breached cladding.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Crack Stability in Breached Fuel

This report describes the fracture mechanics formalism to evaluate the stability of cracks in a fuel cladding. Recognized consensus-body linear elastic fracture mechanics (LEFM) was applied to identify the crack instability length, or the length at which unstable mechanical crack extension would occur, as a function of pellet swelling loading (radial strain and fraction conversion from UO 2 to U 3 O 8 ) at the local cracked cladding region for two postulated fracture toughness (K IC ) values of the cladding. The crack opening displacement (COD) and the crack opening area (COA) were also identified. This analysis informs evaluations for crack extension and the potential for pellet debris loss from the fuel rod for cases of pellet oxidation in dry storage canisters where inadvertent residual water may undergo radiolysis causing oxidizing conditions to pellets exposed to the canister environment through breached cladding.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

The Essence of Cryptol: A Denotational Cryptol Interpreter in Coq for Foundational Assurances for Quantum Resistant Cryptosystems

Systems of the utmost consequence need a means to establish authenticity of software and data. Cryptosystems implement authentication, but can be vulnerable to cryptographic and implementation attacks. With the threat of quantum cryptographic attacks, “post-quantum” cryptosystems (PQCs) must be henceforth used in these systems. However, the new cryptography needs new ways to, rigorously and machine-checkably, prove systems free of vulnerabilities. We propose a retargetable capability to rapidly instantiate proven correct postquantum cryptosystems through novel proof-carrying synthesis and proof-automation technique, extending those proven successful on existing systems. This capability is crucial to meeting the cryptographic requirements for future high-consequence systems. Since specifications for high consequence cryptography are presently captured in a domain specific language known as Cryptol. While this can enable convenient fully automated reasoning about Cryptol specificaitons and implementations via the Software Analysis Workbench (SAW), Cryptol has expressivity gaps, so that cryptosystems with probabilistic programming features like Falcon cannot be fully expressed in the language. Moreover, SAW’s automation fails for programs and specificaitons with inductive and recursive structure, as in the Sphincs+ PQC. Finally, Cryptol and SAW together represent some 200,000 lines of unverified Haskell, so that the any guarantees about high consequence cryptography are presently contingent on a large, unverified, yet trusted computing base. The first step of the larger project of agile, assured crpytography is therefore to provide a formal, mechanized semantics for Cryptol, so that the specifications expressed by cryptographers in Cryptol can be reasoned about and compiled into performant implementations with a foundational, machine checkable certificate of correctness. This report describes our work on this first step, culminating in the design of a certified denotational interpreter, in Coq, for core Cryptol.

97 MATHEMATICS AND COMPUTING↗