Union, Intersection, and Refinement Types and Reasoning About Type Disjointness for Secure Protocol Implementations - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Article Dans Une Revue Journal of Computer Security Année : 2014

Union, Intersection, and Refinement Types and Reasoning About Type Disjointness for Secure Protocol Implementations

Résumé

We present a new type system for verifying the security of reference implementations of cryptographic protocols written in a core functional programming language. The type system combines prior work on refinement types, with union, intersection, and polymorphic types, and with the novel ability to reason statically about the disjointness of types. The increased expressivity enables the analysis of important protocol classes that were previously out of scope for the type-based analyses of reference protocol implementations. In particular, our types can statically characterize: (i) more usages of asymmetric cryptography, such as signatures of private data and encryptions of authenticated data; (ii) authenticity and integrity properties achieved by showing knowledge of secret data; (iii) applications based on zero-knowledge proofs. The type system comes with a mechanized proof of correctness and an efficient type-checker.
Fichier non déposé

Dates et versions

hal-01102192 , version 1 (12-01-2015)

Identifiants

Citer

Michael Backes, Cătălin Hriţcu, Matteo Maffei. Union, Intersection, and Refinement Types and Reasoning About Type Disjointness for Secure Protocol Implementations. Journal of Computer Security, 2014, 22 (2), pp.301-353. ⟨10.3233/JCS-130493⟩. ⟨hal-01102192⟩

Collections

INRIA INRIA2
69 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More