Effective symbolic protocol analysis via equational irreducibility conditions

S Erbatur, S Escobar, D Kapur, Z Liu, C Lynch… - … –ESORICS 2012: 17th …, 2012 - Springer
Computer Security–ESORICS 2012: 17th European Symposium on Research in …, 2012Springer
We address a problem that arises in cryptographic protocol analysis when the equational
properties of the cryptosystem are taken into account: in many situations it is necessary to
guarantee that certain terms generated during a state exploration are in normal form with
respect to the equational theory. We give a tool-independent methodology for state
exploration, based on unification and narrowing, that generates states that obey these
irreducibility constraints, called contextual symbolic reachability analysis, prove its …
Abstract
We address a problem that arises in cryptographic protocol analysis when the equational properties of the cryptosystem are taken into account: in many situations it is necessary to guarantee that certain terms generated during a state exploration are in normal form with respect to the equational theory. We give a tool-independent methodology for state exploration, based on unification and narrowing, that generates states that obey these irreducibility constraints, called contextual symbolic reachability analysis, prove its soundness and completeness, and describe its implementation in the Maude-NPA protocol analysis tool. Contextual symbolic reachability analysis also introduces a new type of unification mechanism, which we call asymmetric unification, in which any solution must leave the right side of the solution irreducible. We also present experiments showing the effectiveness of our methodology.
Springer
以上显示的是最相近的搜索结果。 查看全部搜索结果