Skip to Main content Skip to Navigation
Conference papers

A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis of Diffie-Hellman Protocols

Abstract : The Noise specification describes how to systematically construct a large family of Diffie-Hellman based key exchange protocols, including the secure transports used by WhatsApp, Lightning, and WireGuard. As the specification only makes informal security claims, earlier work has explored which formal security properties may be enjoyed by protocols in the Noise framework, yet many important questions remain open. In this work we provide the most comprehensive, systematic analysis of the Noise framework to date. We start from first principles and, using an automated analysis tool, compute the strongest threat model under which a protocol is secure, thus enabling formal comparison between protocols. Our results allow us to objectively and automatically associate each informal security level presented in the Noise specification with a formal security claim. We also provide a fine-grained separation of Noise protocols that were previously described as offering similar security properties, revealing a subclass for which alternative Noise protocols exist that offer strictly better security guarantees. Our analysis also uncovers missing assumptions in the Noise specification and some surprising consequences, e.g., in some situations higher security levels yield strictly worse security.
Document type :
Conference papers
Complete list of metadata
Contributor : Lucca Hirschi Connect in order to contact the contributor
Submitted on : Friday, January 8, 2021 - 2:19:06 PM
Last modification on : Friday, January 21, 2022 - 3:12:02 AM
Long-term archiving on: : Friday, April 9, 2021 - 7:02:53 PM


Files produced by the author(s)


  • HAL Id : hal-03103869, version 1



Guillaume Girol, Lucca Hirschi, Ralf Sasse, Dennis Jackson, Cas Cremers, et al.. A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis of Diffie-Hellman Protocols. USENIX 2020 - 29th Usenix Security Symposium, Aug 2020, Virtual, United States. ⟨hal-03103869⟩



Les métriques sont temporairement indisponibles