Skip to Main content Skip to Navigation
Conference papers

SoK: Computer-Aided Cryptography

Abstract : Computer-aided cryptography is an active area of research that develops and applies formal, machine-checkable approaches to the design, analysis, and implementation of cryptography. We present a cross-cutting systematization of the computer-aided cryptography literature, focusing on three main areas: (i) design-level security (both symbolic security and computational security), (ii) functional correctness and efficiency, and (iii) implementation-level security (with a focus on digital side-channel resistance). In each area, we first clarify the role of computer-aided cryptography-how it can help and what the caveats are-in addressing current challenges. We next present a taxonomy of state-of-the-art tools, comparing their accuracy, scope, trustworthiness, and usability. Then, we highlight their main achievements, trade-offs, and research challenges. After covering the three main areas, we present two case studies. First, we study efforts in combining tools focused on different areas to consolidate the guarantees they can provide. Second, we distill the lessons learned from the computer-aided cryptography community's involvement in the TLS 1.3 standardization effort. Finally, we conclude with recommendations to paper authors, tool developers, and standardization bodies moving forward.
Document type :
Conference papers
Complete list of metadata
Contributor : Bruno Blanchet Connect in order to contact the contributor
Submitted on : Tuesday, December 8, 2020 - 3:26:12 PM
Last modification on : Friday, January 21, 2022 - 3:19:30 AM
Long-term archiving on: : Tuesday, March 9, 2021 - 7:39:00 PM


Files produced by the author(s)


  • HAL Id : hal-03046757, version 1



Manuel Barbosa, Gilles Barthe, Karthik Bhargavan, Bruno Blanchet, Cas Cremers, et al.. SoK: Computer-Aided Cryptography. SP 2021 - 42nd IEEE Symposium on Security and Privacy, May 2021, Virtual Conference, United States. ⟨hal-03046757⟩



Les métriques sont temporairement indisponibles