Home on Ectopass 👻

Tutorial

Wed, 10 Jun 2026 11:13:15 +0200

Using the web version of VS Code and the Ectopass extension we created, you can easily test it from your browser!

Open VS Code for the web.
Open the Extensions on the left side bar and search for the Ectopass extension. Install it.
Launch the Ectopass: Demo command.

How does the extension work

The Ectopass: Demo command only works from the web version of VS Code. It sends the opened C and TOML files to a web service which compiles the code with the Ectopass plugin activated. Depending on the configuration file, Ectopass produces different results.

Benchmarks

Wed, 10 Jun 2026 11:12:42 +0200

Libsodium

Libsodium is a crypto library written in C.

We compared two versions of Libsodium:

one where SLH is activated on all files
one where SLH is activated only for files where Ectopass finds a vulnerability (selective SLH)

We observed that the overhead of SLH is significantly lower when SLH is applied selectively. Note that this is without using any annotation in Ectopass’ configuration to remove eventual false positives. The difference could be even higher using them.

Contact

Mon, 08 Jun 2026 13:43:03 +0200

Ectopass has been developed at KTH Royal Institute of Technology in Sweden, Stockholm by:

Hamed Nemati, Assistant Professor
Roberto Guanciale, Associate Professor
Can Aknesil, Postdoc
Hugues de Valon, Research Engineer

Get in touch if you would like to get more information about Ectopass or how to use it for your own projects!