Deciding knowledge in security protocols for monoidal equational theories. - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2007

Deciding knowledge in security protocols for monoidal equational theories.

Résumé

In formal approaches, messages sent over a network are usually modeled by terms together with an equational theory, axiomatizing the properties of the cryptographic functions (encryption, exclusive or, . . . ). The analysis of cryptographic protocols requires a precise understanding of the attacker knowledge. Two standard notions are usually used: deducibility and indistinguishability. Only few results have been obtained (in an ad-hoc way) for equational theories with associative and commutative properties, especially in the case of static equivalence. The main contribution of this paper is to propose a general setting for solving deducibility and indistinguishability for an important class (called monoidal ) of these theories. Our setting relies on the correspondence between a monoidal theory E and a semiring SE which allows us to give an algebraic characterization of the deducibility and indistinguishability problems. As a consequence we recover easily existing decidability results and obtain several new ones.
Fichier non déposé

Dates et versions

inria-00181606 , version 1 (24-10-2007)

Identifiants

  • HAL Id : inria-00181606 , version 1

Citer

Véronique Cortier, Stéphanie Delaune. Deciding knowledge in security protocols for monoidal equational theories.. 14th Int. Conference on Logic for Programming, Artificial Intelligence, and Reasoning - LPAR'07, Oct 2007, Yerevan, Armenia. ⟨inria-00181606⟩
117 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More