Weird Machines in Transport Layer Security

2026-08-13

AI Summary

This study addresses trust decision risks arising from computational capabilities in TLS protocol implementations by extending Weird Machine Theory and introducing the concept of "trust-driven" computation. Through formal verification and code auditing of OpenSSL and BoringSSL, we demonstrate that legitimate combinations of handshake primitives can constitute a Turing-complete system. Accordingly, this work establishes an anomaly detection mechanism based on TLS primitives and empirically validates authentication bypass attacks achievable without memory corruption. These findings reveal fundamental vulnerabilities wherein primitive composition enables arbitrary computation and circumvents security policies, thereby providing a novel defensive paradigm and theoretical foundation for securing TLS implementations against computation-induced trust failures.

Abstract

Weird machines are latent computational capabilities that emerge from the composition of architectural components. Prior work has studied this phenomenon extensively in software systems, including x86 instructions, ELF metadata, and page tables, and more recently in cyber-physical systems such as industrial control networks. This paper extends weird machine theory to a new domain: the Transport Layer Security (TLS) handshake and its two dominant implementations, OpenSSL and BoringSSL. We show that legitimate TLS primitives, including session cache entries, renegotiation logic, extension parsing, and certificate verification steps, compose into Turing-complete systems whose computation is coupled to authentication and trust decisions rather than physical actuation. We formalize this coupling, which we call trust actuation, and argue that any TLS implementation providing session storage, arithmetic on sequence counters, conditional branching on handshake state, and iteration through resumption or retry loops satisfies the conditions for arbitrary computation. We validate this theory with two working demonstrations built on real OpenSSL code paths. The first, a sentinel system, composes standard TLS primitives into a defensive mechanism that detects anomalous handshake behavior. The second, an authentication bypass, composes the same class of primitives into an attack that defeats a cipher-strength policy check through mid-connection renegotiation, without any memory corruption or external malware. Both demonstrations run against real server and client binaries in Docker.

Problem

• Weird Machines
• Transport Layer Security
• Trust Actuation
• Turing-complete
• TLS Handshake

Innovation

• Weird Machines
• Transport Layer Security
• Trust Actuation
• Turing-complete
• OpenSSL