Cryptographic Verification by Typing for a Sample Protocol Implementation - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Chapitre D'ouvrage Année : 2011

Cryptographic Verification by Typing for a Sample Protocol Implementation

Résumé

Type systems are effective tools for verifying the security of cryptographic protocols and implementations. They provide automation, modularity and scalability, and have been applied to large protocols. In this tutorial, we illustrate the use of types for verifying authenticity properties, first using a symbolic model of cryptography, then relying on a concrete computational assumption. (1) We introduce refinement types (that is, types carrying formulas to record invariants) for programs written in F# and verified by F7, an SMT-based type checker. (2) We describe a sample authenticated RPC protocol, we implement it in F#, and we specify its security against active adversaries. (3) We develop a sample symbolic library, we present its main cryptographic invariants, and we show that our RPC implementation is perfectly secure when linked to this symbolic library. (4) We implement the same library using concrete cryptographic primitives, we make a standard computational assumption, and we show that our RPC implementation is also secure with overwhelming probability when linked to this concrete library.
Fichier principal
Vignette du fichier
cryptographic_verification_fosad10.pdf (350.92 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01295013 , version 1 (04-04-2016)

Identifiants

Citer

Cédric Fournet, Karthikeyan Bhargavan, Andrew D. Gordon. Cryptographic Verification by Typing for a Sample Protocol Implementation. Alessandro Aldini; Roberto Gorrieri Cryptographic Verification by Typing for a Sample Protocol Implementation, 6858, Springer, 2011, LNCS - Lecture Notes in Computer Science, 978-3-642-23081-3. ⟨10.1007/978-3-642-23082-0_3⟩. ⟨hal-01295013⟩
68 Consultations
198 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More