HAL will be down for maintenance from Friday, June 10 at 4pm through Monday, June 13 at 9am. More information
Skip to Main content Skip to Navigation
Conference papers

A Cryptographic Model for Branching Time Security Properties -- the Case of Contract Signing Protocols.

Véronique Cortier 1 Ralf Kuesters 2 Bogdan Warinschi 3
1 CASSIS - Combination of approaches to the security of infinite states systems
FEMTO-ST - Franche-Comté Électronique Mécanique, Thermique et Optique - Sciences et Technologies (UMR 6174), Inria Nancy - Grand Est, LORIA - FM - Department of Formal Methods
Abstract : Some cryptographic tasks, such as contract signing and other related tasks, need to ensure complex, branching time security properties. When defining such properties one needs to deal with subtle problems regarding the scheduling of non-deterministic decisions, the delivery of messages sent on resilient (non-adversarially controlled) channels, fair executions (executions where no party, both honest and dishonest, is unreasonably precluded to perform its actions), and defining strategies of adversaries against all possible non-deterministic choices of parties and arbitrary delivery of messages via resilient channels. These problems are typically not addressed in cryptographic models and these models therefore do not suffice to formalize branching time properties, such as those required of contract signing protocols. In this paper, we develop a cryptographic model that deals with all of the above problems. One central feature of our model is a general definition of fair scheduling which not only formalizes fair scheduling of resilient channels but also fair scheduling of actions of honest and dishonest principals. Based on this model and the notion of fair scheduling, we provide a definition of a prominent branching time property of contract signing protocols, namely balance, and give the first cryptographic proof that the Asokan-Shoup-Waidner two-party contract signing protocol is balanced.
Document type :
Conference papers
Complete list of metadata

Contributor : Véronique Cortier Connect in order to contact the contributor
Submitted on : Wednesday, October 24, 2007 - 10:29:34 AM
Last modification on : Friday, January 21, 2022 - 3:09:06 AM


  • HAL Id : inria-00181601, version 1


Véronique Cortier, Ralf Kuesters, Bogdan Warinschi. A Cryptographic Model for Branching Time Security Properties -- the Case of Contract Signing Protocols.. 12th European Symposium On Research In Computer Security - ESORICS'07, Sep 2007, Dresden, Germany. pp.422-437. ⟨inria-00181601⟩



Record views