Cryptographically sound implementations for typed information-flow security