Skip to Main content Skip to Navigation
Conference papers

A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis of Diffie-Hellman Protocols

Abstract : The Noise specification describes how to systematically construct a large family of Diffie-Hellman based key exchange protocols, including the secure transports used by WhatsApp, Lightning, and WireGuard. As the specification only makes informal security claims, earlier work has explored which formal security properties may be enjoyed by protocols in the Noise framework, yet many important questions remain open. In this work we provide the most comprehensive, systematic analysis of the Noise framework to date. We start from first principles and, using an automated analysis tool, compute the strongest threat model under which a protocol is secure, thus enabling formal comparison between protocols. Our results allow us to objectively and automatically associate each informal security level presented in the Noise specification with a formal security claim. We also provide a fine-grained separation of Noise protocols that were previously described as offering similar security properties, revealing a subclass for which alternative Noise protocols exist that offer strictly better security guarantees. Our analysis also uncovers missing assumptions in the Noise specification and some surprising consequences, e.g., in some situations higher security levels yield strictly worse security.
Document type :
Conference papers
Complete list of metadatas

https://hal.inria.fr/hal-03103869
Contributor : Lucca Hirschi <>
Submitted on : Friday, January 8, 2021 - 2:19:06 PM
Last modification on : Sunday, January 10, 2021 - 3:26:08 AM

File

sec20fall_girol_prepub.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : hal-03103869, version 1

Collections

Citation

Guillaume Girol, Lucca Hirschi, Ralf Sasse, Dennis Jackson, Cas Cremers, et al.. A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis of Diffie-Hellman Protocols. USENIX 2020 - 29th Usenix Security Symposium, Aug 2020, Virtual, United States. ⟨hal-03103869⟩

Share

Metrics

Record views

20

Files downloads

33