Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “consequence”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 721 records · Page 40

Intrinsic torque reversals induced by magnetic shear effects on the turbulence spectrum in tokamak plasmas

Intrinsic torque, which can be generated by turbulent stresses, can induce toroidal rotation in a tokamak plasma at rest without direct momentum injection. Reversals in intrinsic torque have been inferred from the observation of toroidal velocity changes in recent lower hybrid current drive (LHCD) experiments. This work focuses on understanding the cause of LHCD-induced intrinsic torque reversal using gyrokinetic simulations and theoretical analyses. A new mechanism for the intrinsic torque reversal linked to magnetic shear (s{sup ^}) effects on the turbulence spectrum is identified. This reversal is a consequence of the ballooning structure at weak s{sup ^}. Based on realistic profiles from the Alcator C-Mod LHCD experiments, simulations demonstrate that the intrinsic torque reverses for weak s{sup ^} discharges and that the value of s{sup ^}{sub crit} is consistent with the experimental results s{sup ^}{sub crit}{sup exp}≈0.2∼0.3 [Rice et al., Phys. Rev. Lett. 111, 125003 (2013)]. The consideration of this intrinsic torque feature in our work is important for the understanding of rotation profile generation at weak s{sup ^} and its consequent impact on macro-instability stabilization and micro-turbulence reduction, which is crucial for ITER. It is also relevant to internal transport barrier formation at negative or weakly positive s{sup ^}.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Understanding the breakdown of classic two-phase theory and spray atomization at engine-relevant conditions

We present a generalized framework for multi-component liquid injections to understand and predict the breakdown of classic two-phase theory and spray atomization at engine-relevant conditions. The analysis focuses on the thermodynamic structure and the immiscibility state of representative gas-liquid interfaces. The most modern form of Helmholtz energy mixture state equation is utilized which exhibits a unique and physically-consistent behavior over the entire two-phase regime of fluid densities. It is combined with generalized models for non-linear Gradient Theory and for liquid injections to quantify multi-component two-phase interface structures in global thermal equilibrium. Then, the Helmholtz free energy is minimized which determines the interfacial species distribution as a consequence. This minimal free energy state is demonstrated to validate the underlying assumptions of classic two-phase theory and spray atomization. However, under certain engine-relevant conditions for which corroborating experimental data is presented, this requirement for interfacial thermal equilibrium becomes unsustainable. A rigorously derived probability density function quantifies the ability of the interface to develop internal spatial temperature gradients in the presence of significant temperature differences between injected liquid and ambient gas. Then, the interface can no longer be viewed as an isolated system at minimal free energy. Instead, the interfacial dynamics become intimately connected to those of the separated homogeneous phases. Hence, the interface transitions toward a state in local equilibrium whereupon it becomes a dense-fluid mixing layer. A new conceptual view of a transitional liquid injection process emerges from a transition time scale analysis. Close to the nozzle exit, the two-phase interface still remains largely intact and more classic two-phase processes prevail as a consequence. Further downstream, however, the transition to dense- fluid mixing generally occurs before the liquid length is reached. The significance of the presented modeling expressions is established by a direct comparison to a reduced model, which utilizes widely-applied approximations but fundamentally fails to capture the physical complexity discussed in this paper.

42 ENGINEERING↗

Supermassive Black Holes from Ultra Strongly Self Interacting Dark Matter

We consider the cosmological consequences if a small fraction (ƒ≲0.1) of the dark matter is ultra-strongly self-interacting, with an elastic self-interaction cross section per unit mass σ$\gg$1 cm 2 g -1 . This possibility evades all current constraints that assume that the self-interacting component makes up the majority of the dark matter. Nevertheless, even a small fraction of ultra-strongly self-interacting dark matter (uSIDM) can have observable consequences on astrophysical scales. In particular, the uSIDM subcomponent can undergo gravothermal collapse and form seed black holes in the center of a halo. These seed black holes, which form within several hundred halo interaction times, contain a few percent of the total uSIDM mass in the halo. For reasonable values of σƒ, these black holes can form at high enough redshifts to grow to ~10 9 M ⊙ quasars by z≳6, alleviating tension within the standard Λ cold dark matter cosmology. The ubiquitous formation of central black holes in halos could also create cores in dwarf galaxies by ejecting matter during binary black hole mergers, potentially resolving the “too big to fail” problem.

79 ASTRONOMY AND ASTROPHYSICS↗

Breaking discrete symmetries in the effective field theory of inflation

We study the phenomenon of discrete symmetry breaking during the inflationary epoch, using a model-independent approach based on the effective field theory of inflation. We work in a context where both time reparameterization symmetry and spatial diffeomorphism invariance can be broken during inflation. We determine the leading derivative operators in the quadratic action for fluctuations that break parity and time-reversal. Within suitable approximations, we study their consequences for the dynamics of linearized fluctuations. Both in the scalar and tensor sectors, we show that such operators can lead to new direction-dependent phases for the modes involved. They do not affect the power spectra, but can have consequences for higher correlation functions. Moreover, a small quadrupole contribution to the sound speed can be generated.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗

Traces of nonequilibrium effects, initial condition, bulk dynamics, and elementary collisions in the charm observables

Heavy quarks produced in relativistic heavy-ion collisions are known to be sensitive probes of the hot and dense QCD matter they traverse. In this paper we study how their dynamics is affected by the nature of the bulk evolution of the QCD matter, the initial condition of the system, and the treatment of elementary interactions between heavy quarks and the surrounding medium. For the same initial condition and the same quark-gluon plasma (QGP) expansion scenario we discuss the consequences of the assumption of a local equilibrium by comparing the consequences for the nuclear modification factor $R_{AA}$ and the elliptic flows of charm quarks, scrutinizing the different components of the final distribution of charm quarks. For this purpose we employ the parton-hadron-string dynamics (PHSD) model, which is an off-shell microscopic transport approach, as well as the linearized-Boltzmann (LB) scheme obtained by coarse graining the PHSD bulk and assuming local equilibrium for the interactions of the charm quarks with the bulk. The $R_{AA}$ of charm quarks stemming from the later LB approach is also compared to a genuine fluid dynamics evolution initiated by the coarse grained PHSD, which allows us to further assess the consequences of reducing the full $\textit{n}$-body dynamics. We then proceed to a systematic comparison of PHSD (in its LB approximation) with MC@HQ, another transport model for heavy flavors which also relies on the LB approach. In particular, we investigate the consequences for the nuclear modification factor of charm quarks if we vary separately the initial heavy quark distribution function in matter, the expansion dynamics of the QGP, and the elementary interactions of heavy quarks of these models. We find that the results for both models vary significantly depending on the details of the calculation. However, both models achieve very similar predictions for key heavy quark observables for certain combinations of initial condition, bulk evolution, and interactions. In this work, we conclude that this ambiguity limits our ability to determine the different properties of the system based on the current set of observables.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Dark matter effective field theory scattering in direct detection experiments

We examine the consequences of the effective field theory (EFT) of dark matter–nucleon scattering for current and proposed direct detection experiments. Exclusion limits on EFT coupling constants computed using the optimum interval method are presented for SuperCDMS Soudan, CDMS II, and LUX, and the necessity of combining results from multiple experiments in order to determine dark matter parameters is discussed. We demonstrate that spectral differences between the standard dark matter model and a general EFT interaction can produce a bias when calculating exclusion limits and when developing signal models for likelihood and machine learning techniques. We also discuss the implications of the EFT for the next-generation (G2) direct detection experiments and point out regions of complementarity in the EFT parameter space.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗

Evolutionary Legacy Effects on Ecosystems: Biogeographic Origins, Plant Traits, and Implications for Management in the Era of Global Change

It is known that biogeographic origins of plant lineages are often reflected in species functional traits, with consequences for community assembly, diversity, and ecosystem function. The climatic and environmental conditions in which species evolved have lasting influence (legacy effects) through phylogenetic conservatism of traits that underlie community assembly and drive ecosystem processes. Legacy effects that influence community assembly may have direct consequences for ecosystem function or may be linked, owing to lineage history, to traits that impact ecosystems. Evolutionary priority effects, driven by the order of colonization and lineage diversification, as well as migration barriers and historical environmental changes, have shaped the diversity and composition of regional floras and their ecosystem functions. We examine the likely consequences of biogeographic history for plant responses to global change and consider how understanding linkages between biogeographic origins, functional traits, and ecosystem consequences can aid the management and restoration of ecosystems globally in the face of rapid environmental change.

58 GEOSCIENCES↗

Constellation's best estimate alternate source term methodology overview

Safety analyses for a nuclear power plants need to consider postulated accidents that results in at risk of accidental release of radiation. The regulations require plant specific safety analysis reports to include an evaluation of the requirements of 10CFR50.67. Such a safety analysis report mandates limits such that calculated radiological consequences relative to certain dose locations do not exceed a total effective dose equivalent (TEDE) limits following a postulated release of radioactivity. Calculations are performed to estimate the radiological consequences, in terms of dose, to people and equipment to ensure the estimated doses are within the prescribed limits. Analysis should demonstrate, with reasonable assurance, that these prescribed limits are complied with. Conventional methodologies utilize conservative approaches to address lack of uncertainty quantification in the utilized approaches, methods, and/or inputs. These built-in excess conservatisms often result in compounding effects and hence overly conservative results in the estimated radiological consequences, which leads to inaccurate margin evaluation for operation and accident mitigation. Therefore, evaluating accurate dose consequences is needed for both operational and safety reasons. The research documented in this paper provides an overview of Constellation's Best Estimate Alternate Source Term (BEAST) Methodology. BEAST methodology relies upon the use of realistic yet bounding input distributions for key analysis parameters, which replaces use of conservative deterministic singular inputs that bound overall analysis domain. This approach enables evaluating a more accurate accident analysis response, while enabling a bounding licensing basis envelope via more accurate quantification of uncertainty in the application. Therefore, built-in margin for a given scenario is more accurately evaluated.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

EMP/GMD Phase 0 Report, A Review of EMP Hazard Environments and Impacts

The purpose of this study is to determine methods to analyze the hazard environments, impacts, and consequences of different sources of electromagnetic pulse (EMP), including nuclear electromagnetic pulse (NEMP) and geomagnetic disturbance (GMD) on the U.S. electric power infrastructures and to use those methods to determine EMP and GMD events of concern. The study will be carried out in four phases, each of which will provide higher levels of analytic fidelity that focuses on those EMP/GMD sources and events that create significant consequences, or whose consequences are sufficiently uncertain, to require more in-depth study. This study will leverage the best experimental data; device, equipment and system models; and simulation tools currently available. This study focuses primarily on the bulk electric system (BES) including large generating stations, large power transformers, the transmission network, and transmission system protection. Electrical distribution systems may potentially be included, if warranted, after consideration of the consequences for the bulk power system.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Studies for the requirements of automatic and remotely controlled shutoff valves on hazardous liquids and natural gas pipelines with respect to public and environmental safety

This study assesses the effectiveness of block valve closure swiftness in mitigating the consequences of natural gas and hazardous liquid pipeline releases on public and environmental safety. It also evaluates the technical, operational, and economic feasibility and potential cost benefits of installing automatic shutoff valves (ASVs) and remote control valves (RCVs) in newly constructed and fully replaced transmission lines. Risk analyses of hypothetical pipeline release scenarios are used as the basis for assessing: (1) fire damage to buildings and property in Class 1, Class 2, Class 3, and Class 4 high consequence areas (HCAs) caused by natural gas pipeline releases and subsequent ignition of the released natural gas; (2) fire damage to buildings and property in HCAs designated as high population areas and other populated areas caused by hazardous liquid pipeline releases and subsequent ignition of the released propane; and (3) socioeconomic and environmental damage in HCAs caused by hazardous liquid pipeline releases of crude oil. These risk analyses use engineering principles and fire science practices to characterize thermal radiation effects on buildings and humans and to quantify the total damage cost of socioeconomic and environmental impacts. The risk analysis approach used for natural gas pipelines is consistent with risk assessment standards developed by industry and incorporated into Federal pipeline safety regulations. Feasibility evaluations for the hypothetical pipeline release scenarios considered in this study show that installation of ASVs and RCVs in newly constructed and fully replaced natural gas and hazardous liquid pipelines is technically, operationally, and economically feasible with a positive cost benefit. However, these results may not apply to all newly constructed and fully replaced pipelines because site-specific parameters that influence risk analyses and feasibility evaluations often vary significantly from one pipeline segment to another and may not be consistent with those considered in this study. Consequently, the technical, operational, and economic feasibility and potential cost benefits of installing ASVs and RCVs in newly constructed or fully replaced pipelines need to be evaluated on a case-by-case basis. In theory, installing ASVs and RCVs in pipelines can be an effective strategy for mitigating potential consequences of unintended releases because decreasing the total volume of the release reduces overall impacts on the public and to the environment. However, block valve closure has no effect on preventing pipeline failure or stopping the product that remains inside the isolated pipeline segments from escaping into the environment. The benefits in terms of cost avoidance attributed to block valve closure swiftness increase as the time required to isolate the damaged transmission pipeline segment decreases. Block valve closure swiftness is most effective in mitigating damage resulting from a pipeline release and subsequent fire when the damaged pipeline segment is isolated and the thermal radiation produced by the fire declines in time so that emergency responders can safely begin fire fighting activities immediately upon arrival at the scene. Similarly, the avoided cost of socioeconomic and environmental damage for hazardous liquid pipeline releases without ignition increase as time required to isolate the damaged pipeline segment decreases.

03 NATURAL GAS↗

Marine Mammal Behavioral Response to Tidal Turbine Sound

The sound emitted by tidal turbines overlaps with the generalized hearing ranges for marine mammals and may, consequently, affect marine mammal behavior. Because of the strong environmental protections for marine mammals, these effects are of interest to resource agencies and project developers. The primary goal of this project is to improve the understanding of how sound emitted by tidal turbines may affect marine mammal behavior, with the intent that such understanding may allow this environmental risk to be “retired” for initial demonstrations and arrays. A secondary project goal is to evaluate the efficacy of marine mammal observations from a shore-based vantage point as a method to detect change as a consequence of marine energy stressors. Three, two-week trials were conducted across spring, summer and autumn of 2017 during which vantage-point observations of marine mammals were made from land. We refer to these two-week periods as ‘trials’ as they represent different periods of field data collection. These observations consisted of scan samples every 10 minutes with a set of binoculars and a DSLR camera. When pinnipeds were sighted, still images were taken. When harbor porpoise were sighted, focal follows using video were initiated. These data were later analyzed to estimate the location of animals sighted using photogrammetric techniques. For approximately half of each trial period, a boat was moored in the study area from which an underwater projector was used to play back tidal turbine sounds at a broadband source level of 158 dB re µPa @ 1 m. The other half of each trial period had no playbacks and was used as a control period. During the control and playback periods, ancillary data were collected in the study area near the sea floor (ambient noise, tidal velocity, and porpoise clicks) while weather and vessel tracks were recorded near the vantage-point station. Harbor seals did not show a significant response to the simulated turbine noise, nor did harbor porpoise change their closest point of approach or change the direction/deviation of the paths during periods when the playback was occurring. While porpoise sightings and porpoise acoustic detections were significantly reduced during playback periods in the first two trials, the number of detections during the playback periods increased during the third trial. Similarly, the calculated distance from porpoises to the playback location suggests that harbor porpoises avoided an area around the playback location of approximately 300 m during Trial 1, which decreased to approximately 100 m in Trial 2, and disappeared in Trial 3. This could be an indication of habituation or increased tolerance, either to the playback sound or the vessel presence. Our finding of no significant effect of turbine noise on harbor seals contrast with the findings in a previous study by Hastie et al. (2017) conducted in United Kingdom waters. However, due to substantive differences in source levels and propagation loss, seals in our study would need to have been within 10 m of the playback location to experience similar received levels to those in the Hastie et al. study. Consequently, the two studies may actually be in agreement. Our findings of significant effect of turbine noise on harbor porpoise are in line with previous studies suggesting the harbor porpoise are sensitive to noise. However, we note that, due to cost and logistical constraints, the playback vessel was only mooring during the playback periods. Consequently, we cannot definitively ascribe the changes in porpoise behavior to the simulated turbine noise, playback vessel presence, or a combination of both factors. This methodological limitation and other lessons learned are discussed to benefit future studies that explore the effects of acoustic stressors on marine mammals.

16 TIDAL AND WAVE POWER↗

Building the Scientific Basis for Cyber Resilience of Critical Infrastructure

Rigorous methods and models are needed to quantify, measure, and increase the cyber resilience of critical infrastructure. An adversary may exploit vulnerabilities in the vital networks such as industrial control systems (ICS) associated with critical infrastructure (e.g., energy, financial, transportation, security), in order to achieve harmful consequences. In cyber systems, the number of vulnerabilities may be large, the attack surface changes over time, and the problem consists of both technical and non-technical factors (e.g., errors in software and human error). Given this complex and dynamic landscape, strategically mitigating risk is important, where “risk” considers both the probability of an event and the consequences if that event occurs. One way to decrease risk is to address consequences by ensuring that critical infrastructure is resilient. In this context, resilience is characterized by the magnitude and duration of a deviation from targeted performance levels, given a disruption. Increasing resilience decreases the consequences of a successful attack.

97 MATHEMATICS AND COMPUTING↗

Multiphysics Simulation of DPC Criticality: Scoping Calculations and Coupling Strategy.

Objectives for Multi-Physics Simulations include: Provide a systematic framework for multi-process modeling — Conduct parallel model development efforts that cover the technical areas needed to support criticality consequence screening in performance assessment (PA) and that will be more closely integrated as development proceeds; Investigate separate effects — Allow partitioning of the overall waste package (WP) internal criticality multi-physics modeling effort during development activities, for study of specific processes that can later be coupled if warranted from interpretation of results; Study scaling and bounding approaches — Where possible, represent criticality consequences in PA using simplification of uncertain criticality event frequency and magnitude, bounding of consequences for screening purposes, and scaling of consequences to multiple WPs; and, Integration among participants — Multiple modeling teams (mainly SNL and ORNL, and their collaborators) will work on different parts of the in-package criticality phenomenology. Insights generated this way will be combined for more realistic coupled modeling, and for validation.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

A Phenomenological Model for the Transport and Plugging of Aerosol through Stress Corrosion Cracks

Recent experimental evidence from Sandia (2018) demonstrated partial microchannel plugging due to particulate deposition. A direct consequence is that the accuracy of consequence assessments can be improved by accounting for the leak path deposition of aerosol in the source term. The filtration effect of microchannels, such as cracks, is relevant to the source term assessments. An important side effect of aerosol deposition in leak paths could be the plugging of the leak path. This report summarizes current progress (as of end of FY19) on the development of a phenomenological model of aerosol transport, deposition, and plugging through microchannels. The purpose is to introduce a generic, reliable numerical model for prediction of aerosol transport, deposition, and plugging in leak paths that are similar to stress corrosion cracks while accounting for potential plugging formation. This effort includes (i) development of a numerical model to analyze the various deposition processes in leak paths and provide quantitative estimates of penetration factors, as well as an understanding of the variables that affect them, (ii) confirmation of model validity with theoretical and experimental data, and (iii) parametric analysis for different scenarios including various particle sizes, pressures, and crack dimensions. Such a model could be used to improve the accuracy of consequence assessments and reduce the uncertainty of radiological consequence predictive analyses by taking the filtering effect of leak path aerosol deposition and plugging into account in the source term. This report includes: (i) an overview of main stress corrosion cracking characteristics, (ii) an overview of the developed numerical model to analyze the various deposition processes in leak paths, to provide quantitative estimates of penetration factors, and to gain an understanding of the variables that affect them, (iii) a summary of validation results and verification of the model’s validity with recent experimental results from Sandia and others, and (iv) a model application example.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Development of Integrated Education, Training and Research Program with Interdisciplinary Applications

Plasma models have been formulated including realistic spatial profiles of both flow and radio frequency induced ponderomotive force. With these inclusions the picture of stability of various plasma and fluid instabilities, as expected, changed drastically with ground-breaking consequences. The inhomogeneous parallel flow and the radio frequency waves can actually shown to stabilize turbulence. This is different from the prevalent notion that both parallel flow shear and radio frequency waves are responsible for the excitation (destabilization) of plasma turbulence. This has several ground-breaking consequences:- (1) the stabilization by parallel flow clearly goes against the conventional notion of the origin of ionospheric oscillation which invokes parallel flow destabilization as the origin, (2) the stabilization by parallel flow opens us a new avenue for improved mode formation in fusion devices - which mostly rely on the perpendicular flow shear stabilization for improved mode formation but the perpendicular flow is damped in a tokamak - so the improved mode formed by the parallel flow can sustain longer and has more prospect for ignition, (3) the complete stabilization of the ITG mode (and consequent suppression of transport) not only explain many unknown phenomena in the space physics but it also raises a prospect for transport barrier formation by the RF waves but not by the RF induced flow (as most works suggest) which is never observed in a tokamak of that magnitude to create a barrier. These are indeed ground-breaking consequences.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Development of Integrated Education, Training and Research Program with Interdisciplinary Applications II

Plasma models have been formulated including realistic spatial profiles of both flow and radio frequency induced ponderomotive force. With these inclusions the picture of stability of various plasma and fluid instabilities, as expected, changed drastically with ground-breaking consequences. The inhomogeneous parallel flow and the radio frequency waves can actually shown to stabilize turbulence. This is different from the prevalent notion that both parallel flow shear and radio frequency waves are responsible for the excitation (destabilization) of plasma turbulence. This has several ground-breaking consequences:- (1) the stabilization by parallel flow clearly goes against the conventional notion of the origin of ionospheric oscillation which invokes parallel flow destabilization as the origin, (2) the stabilization by parallel flow opens us a new avenue for improved mode formation in fusion devices - which mostly rely on the perpendicular flow shear stabilization for improved mode formation but the perpendicular flow is damped in a tokamak - so the improved mode formed by the parallel flow can sustain longer and has more prospect for ignition, (3) the complete stabilization of the ITG mode (and consequent suppression of transport) not only explain many unknown phenomena in the space physics but it also raises a prospect for transport barrier formation by the RF waves but not by the RF induced flow (as most works suggest) which is never observed in a tokamak of that magnitude to create a barrier. These are indeed ground-breaking consequences.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Climate Interventions Risk Framework White Paper

This work describes a structured, risk-based approach for analyzing questions related to the potential deployment of a climate intervention in any user-established future scenario, and further provides a structured means for considering what the potential consequences of such interventions may be. Because the climatological, technological, and geopolitical conditions are currently not believed to be supportive of climate intervention use, the framework establishes a three-pronged approach to frame key analytical questions predicated on future scenarios of interest to the user. These three pieces are: (1) Building a scenario. (2) Assessing the likelihood of that scenario based on assumptions about an actor and their motivations for deploying a climate intervention. (3) Analyzing the potential consequences of that climate intervention. Finally, results from this consequence analysis are compared against projected consequences of unabated climate change as a complete risk analysis of deploying a climate intervention.

54 ENVIRONMENTAL SCIENCES↗

The Essence of Cryptol: A Denotational Cryptol Interpreter in Coq for Foundational Assurances for Quantum Resistant Cryptosystems

Systems of the utmost consequence need a means to establish authenticity of software and data. Cryptosystems implement authentication, but can be vulnerable to cryptographic and implementation attacks. With the threat of quantum cryptographic attacks, “post-quantum” cryptosystems (PQCs) must be henceforth used in these systems. However, the new cryptography needs new ways to, rigorously and machine-checkably, prove systems free of vulnerabilities. We propose a retargetable capability to rapidly instantiate proven correct postquantum cryptosystems through novel proof-carrying synthesis and proof-automation technique, extending those proven successful on existing systems. This capability is crucial to meeting the cryptographic requirements for future high-consequence systems. Since specifications for high consequence cryptography are presently captured in a domain specific language known as Cryptol. While this can enable convenient fully automated reasoning about Cryptol specificaitons and implementations via the Software Analysis Workbench (SAW), Cryptol has expressivity gaps, so that cryptosystems with probabilistic programming features like Falcon cannot be fully expressed in the language. Moreover, SAW’s automation fails for programs and specificaitons with inductive and recursive structure, as in the Sphincs+ PQC. Finally, Cryptol and SAW together represent some 200,000 lines of unverified Haskell, so that the any guarantees about high consequence cryptography are presently contingent on a large, unverified, yet trusted computing base. The first step of the larger project of agile, assured crpytography is therefore to provide a formal, mechanized semantics for Cryptol, so that the specifications expressed by cryptographers in Cryptol can be reasoned about and compiled into performant implementations with a foundational, machine checkable certificate of correctness. This report describes our work on this first step, culminating in the design of a certified denotational interpreter, in Coq, for core Cryptol.

97 MATHEMATICS AND COMPUTING↗