%0 Conference Proceedings %T Symbolic Methods in Computational Cryptography Proofs %+ Institute IMDEA Software [Madrid] %+ Max Planck Institute for Security and Privacy [Bochum] (MPI Security and Privacy) %+ Mathematical, Reasoning and Software (MARELLE) %+ Sûreté du logiciel et Preuves Mathématiques Formalisées (STAMP) %+ École normale supérieure - Cachan (ENS Cachan) %+ Proof techniques for security protocols (PESTO) %+ Département d'informatique de l'École polytechnique (X-DEP-INFO) %A Barthe, Gilles %A Grégoire, Benjamin %A Jacomme, Charlie %A Kremer, Steve %A Strub, Pierre-Yves %< avec comité de lecture %B CSF2019 - 32nd IEEE Computer Security Foundations Symposium %C Hoboken, United States %I IEEE %P 136-13615 %8 2019-06-25 %D 2019 %R 10.1109/CSF.2019.00017 %Z Computer Science [cs]Conference papers %X Code-based game-playing is a popular methodology for proving security of cryptographic constructions and side-channel countermeasures. This methodology relies on treating cryptographic proofs as an instance of relational program verification (between probabilistic programs), and decomposing the latter into a series of elementary relational program verification steps. In this paper, we develop principled methods for proving such elementary steps for probabilistic programs that operate over finite fields and related algebraic structures. We focus on three essential properties: program equivalence, information flow, and uniformity. We give characterizations of these properties based on deducibility and other notions from symbolic cryptography. We use (sometimes improve) tools from symbolic cryptography to obtain decision procedures or sound proof methods for program equivalence, information flow, and uniformity. Finally, we evaluate our approach using examples drawn from provable security and from side-channel analysis-for the latter, we focus on the masking countermeasure against differential power analysis. A partial implementation of our approach is integrated in EASYCRYPT, a proof assistant for provable security, and in MASKVERIF, a fully automated prover for masked implementations. %G English %2 https://hal.science/hal-02404701/document %2 https://hal.science/hal-02404701/file/paper.pdf %L hal-02404701 %U https://hal.science/hal-02404701 %~ X %~ CNRS %~ INRIA %~ ENS-CACHAN %~ INRIA-SOPHIA %~ INRIASO %~ X-DEP %~ OPENAIRE %~ INRIA_TEST %~ INRIA-LORRAINE %~ LORIA2 %~ INRIA-NANCY-GRAND-EST %~ TESTALAIN1 %~ UNIV-LORRAINE %~ INRIA2 %~ LORIA %~ LORIA-FM %~ UNIV-PARIS-SACLAY %~ ENS-CACHAN-SACLAY %~ UNIV-COTEDAZUR %~ IP_PARIS %~ IP_PARIS_COPIE %~ ANR %~ ENS-PARIS-SACLAY %~ INRIA-ALLEMAGNE