A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis of Diffie-Hellman Protocols - Archive ouverte HAL Access content directly
Conference Papers Year :

A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis of Diffie-Hellman Protocols

(1, 2) , (3) , (4) , (5) , (6) , (4)
1
2
3
4
5
6

Abstract

The Noise specification describes how to systematically construct a large family of Diffie-Hellman based key exchange protocols, including the secure transports used by WhatsApp, Lightning, and WireGuard. As the specification only makes informal security claims, earlier work has explored which formal security properties may be enjoyed by protocols in the Noise framework, yet many important questions remain open. In this work we provide the most comprehensive, systematic analysis of the Noise framework to date. We start from first principles and, using an automated analysis tool, compute the strongest threat model under which a protocol is secure, thus enabling formal comparison between protocols. Our results allow us to objectively and automatically associate each informal security level presented in the Noise specification with a formal security claim. We also provide a fine-grained separation of Noise protocols that were previously described as offering similar security properties, revealing a subclass for which alternative Noise protocols exist that offer strictly better security guarantees. Our analysis also uncovers missing assumptions in the Noise specification and some surprising consequences, e.g., in some situations higher security levels yield strictly worse security.
Fichier principal
Vignette du fichier
sec20fall_girol_prepub.pdf (632.07 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03103869 , version 1 (08-01-2021)

Identifiers

  • HAL Id : hal-03103869 , version 1

Cite

Guillaume Girol, Lucca Hirschi, Ralf Sasse, Dennis Jackson, Cas Cremers, et al.. A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis of Diffie-Hellman Protocols. USENIX 2020 - 29th Usenix Security Symposium, Aug 2020, Virtual, United States. ⟨hal-03103869⟩
64 View
101 Download

Share

Gmail Facebook Twitter LinkedIn More