3-Session Online Training for Cryptographic Software Verification
Alpinum’s Formal Verification in Software for Cryptographic Systems training is a 3-session online course for engineers working on secure software, embedded security, cryptographic implementations and verification workflows.
This course explains how formal verification can be used to mathematically prove the correctness, constant-time behaviour and memory safety of cryptographic software implementations. It covers formal verification fundamentals for software cryptography, big-number arithmetic, assembly-level proof targets, constant-time verification, proof scripting, TLS, post-quantum cryptography, regression review and production assurance. The Ticket Tailor listing confirms this is a 3-session online training series delivered on Teams from Mon 24 Aug 2026 3:00 PM – Wed 26 Aug 2026 5:00 PM BST.
Why Formal Verification Matters for Cryptographic Software
Cryptographic software is security-critical. Traditional testing can check many expected behaviours, but it cannot exhaustively prove that an implementation is correct, memory-safe or resistant to timing-based attacks.
Formal verification helps engineering teams reason about cryptographic implementations with stronger mathematical assurance. It can be used to prove correctness properties, identify unsafe assumptions, analyse constant-time behaviour and support production-grade cryptographic assurance.
This course is designed for engineers who need to understand how formal verification applies to real cryptographic software, including TLS, ECC, RSA and post-quantum cryptographic workflows.
Who Should Attend?
This course is suitable for:
- Software verification engineers
- Cryptography engineers
- Embedded security engineers
- Firmware developers
- Cybersecurity and secure systems engineers
- Engineers working on TLS, ECC, RSA or post-quantum cryptography
- Verification specialists working with secure software or cryptographic implementations
What This Course Covers
This live online training series focuses on practical formal verification workflows for cryptographic software.
Key topics include:
- Formal verification fundamentals for software cryptography
- Big-number arithmetic in cryptographic systems
- Assembly-level proof targets
- Constant-time verification methodologies
- Timing attack prevention concepts
- Proof scripting and exhaustive verification workflows
- TLS verification workflows
- Post-quantum cryptographic verification
- Regression, soundness review and production assurance
Course Structure
Session 1: Foundations and Proof Targets
Session 1 introduces the role of formal verification in cryptographic software. Participants learn how big-number arithmetic is represented in software, how proof targets are identified and how assembly implementations are analysed in cryptographic libraries.
Topics include:
- Introduction to formal verification concepts
- Big-number arithmetic in cryptographic systems
- Representation of
uint64_tsoftware big numbers - Mapping operations to RSA and ECC workflows
- Reading x86 and ARM assembly implementations
- Identifying proof targets and verification scope
Session 2: Constant-Time Analysis and Core Proofs
Session 2 focuses on constant-time security, timing attack prevention and formal proofs for cryptographic operations. Participants learn how secret-dependent behaviour can create security risks and how proof workflows can support correctness and memory safety.
Topics include:
- Constant-time security principles
- Timing attack prevention methodologies
- Secret-dependent branches versus conditional moves
- Formal proof engines and proof scripts
- Verifying correctness and memory safety
- Exhaustive proof of core cryptographic operations
Session 3: TLS, Post-Quantum and Production Verification
Session 3 extends formal verification concepts into TLS and post-quantum cryptographic workflows. Participants learn how proof chains, assumptions and regression workflows contribute to production-grade cryptographic assurance.
Topics include:
- TLS verification workflows
- ECDH and ECDSA proof chains
- Post-quantum cryptography verification
- ML-KEM/Kyber and ML-DSA/Dilithium
- NTT verification concepts
- Regression, soundness review and trusted assumptions
What You Will Learn
By the end of this training series, participants will be able to:
- Understand the principles of formal verification in cryptographic software
- Analyse assembly implementations used in modern cryptographic libraries
- Identify and prove constant-time execution properties
- Apply proof techniques to big-number arithmetic operations
- Extend proof workflows into TLS and post-quantum cryptography
- Review proof assumptions, regressions and trusted computing boundaries
Key Benefits
This course helps engineers:
- Learn modern formal verification workflows for cryptographic software
- Understand exhaustive proof methodologies beyond traditional testing
- Verify correctness, timing behaviour and memory safety
- Explore verification for TLS and post-quantum algorithms
- Gain practical insight into production-grade cryptographic assurance
Course Format
| Course Feature | Details |
|---|---|
| Format | Live online training |
| Platform | Teams |
| Structure | 3 sessions |
| Session length | 2 hours per session |
| Dates | Mon 24 Aug 2026 3:00 PM – Wed 26 Aug 2026 |
| Time | 5:00 PM BST |
| Recording | Available to registrants 1 week post-session |
Related Training
Participants may also be interested in:
Formal Verification Training for Hardware and Software
A wider formal verification training hub covering hardware formal, software formal, RISC-V, SoC, SVA, cryptographic systems and security-critical verification.
Book Formal Verification in Software for Cryptographic Systems
Learn how formal verification can strengthen cryptographic software assurance, constant-time analysis, TLS verification and post-quantum cryptographic workflows.
Frequently Asked Questions
What is Formal Verification in Software for Cryptographic Systems?
Formal Verification in Software for Cryptographic Systems is a technical training course focused on applying formal methods to cryptographic software implementations. It covers correctness, constant-time behaviour, memory safety, big-number arithmetic, TLS workflows and post-quantum cryptographic verification.
Who should attend this course?
This course is suitable for software verification engineers, cryptography engineers, embedded security engineers, firmware developers, cybersecurity engineers and specialists working on secure software, TLS, ECC, RSA or post-quantum cryptography.
Does the course cover constant-time analysis?
Yes. The course covers constant-time security principles, timing attack prevention methodologies, secret-dependent branches, conditional moves and proof workflows for verifying constant-time cryptographic behaviour.
Does the course include post-quantum cryptography?
Yes. The course includes post-quantum cryptographic verification topics, including ML-KEM/Kyber, ML-DSA/Dilithium and NTT verification concepts.
Is this course suitable for production cryptographic software teams?
Yes. The course is designed for engineers working with secure software and cryptographic systems. It includes proof assumptions, regression workflows, soundness review and production-grade assurance concepts.
How is the course delivered?
The course is delivered online via Teams as a 3-session training series. Each session is 2 hours, and the Ticket Tailor listing says the sessions run from 24–26 August 2026, 15:00–17:00 BST.
