Automated formal verification of security protocols has been mostly focused on analyzing
high-level abstract models which, however, are significantly different from real protocol …

We describe a largely automated and systematic analysis of TLS implementations by what
we call 'protocol state fuzzing': we use state machine learning to infer state machines from …

The first edition of this book was published in 2003. Inevitably, certain parts of the book
became outdated quickly. At the same time new developments have continued apace …

TLS is the most important cryptographic protocol in use today. However, up to now there is
no complete cryptographic security proof in the standard model, nor in any other model. We …

TLS is possibly the most used protocol for secure communications, with a 18-year history of
flaws and fixes, ranging from its protocol logic to its cryptographic design, and from the …

We intend to narrow the gap between concrete implementations of cryptographic protocols
and their verified models. We develop and verify a small functional implementation of the …

The Transport Layer Security (TLS) protocol is one of the most widely used security
protocols on the internet. Yet do implementations of TLS keep on suffering from bugs and …

We present a security analysis of the complete TLS protocol in the Universal Composable
security framework. This analysis evaluates the composition of key exchange functionalities …

The reliability of a security protocol is of the utmost importance but can easily be
compromised by a vulnerability in the implementation. A crucial aspect of an implementation …

The OTS/CafeOBJ method is an instance of the proof score approach to systems analysis,
which has been mainly devoted by researchers in the OBJ community. We describe some …