In the Verisoft project of the German federal government we use the
C-like programming language C0 for the implementation of most programs
including large parts of an operating system micro kernel. Another
part of the project is the formal verification of a simple non
optimizing compiler for C0.
We will start this talk with a short introduction of the language C0.
Afterwards we will explain the overall structure of the C0 compiler
(which is partitioned into a functional part and a part which is
written in C0 itself) and then present a proof sketch for the formal
verification of the compiler.