DeepSec: Deciding Equivalence Properties for Security Protocols -- Improved theory and practice - Department of Formal methods
Article Dans Une Revue TheoretiCS Année : 2024

DeepSec: Deciding Equivalence Properties for Security Protocols -- Improved theory and practice

Résumé

Automated verification has become an essential part in the security evaluation of cryptographic protocols. In this context privacy-type properties are often modelled by indistinguishability statements, expressed as behavioural equivalences in a process calculus. In this article we contribute both to the theory and practice of this verification problem. We establish new complexity results for static equivalence, trace equivalence and labelled bisimilarity and provide a decision procedure for these equivalences in the case of a bounded number of protocol sessions. Our procedure is the first to decide trace equivalence and labelled bisimilarity exactly for a large variety of cryptographic primitives-those that can be represented by a subterm convergent destructor rewrite system. We also implemented the procedure in a new tool, DeepSec. We showed through extensive experiments that it is significantly more efficient than other similar tools, while at the same time raising the scope of the protocols that can be analysed.

Fichier principal
Vignette du fichier
2211.03225-4.pdf (2.49 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
licence

Dates et versions

hal-04875934 , version 1 (09-01-2025)

Licence

Identifiants

Citer

Vincent Cheval, Steve Kremer, Itsaka Rakotonirina. DeepSec: Deciding Equivalence Properties for Security Protocols -- Improved theory and practice. TheoretiCS, 2024, Volume3, ⟨10.46298/theoretics.24.4⟩. ⟨hal-04875934⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

More