Beyond Subterm-Convergent Equational Theories in Automated Verification of Stateful Protocols
Jannik Dreier, Charles Duménil, Steve Kremer, and Ralf Sasse. Beyond Subterm-Convergent Equational Theories in Automated Verification of Stateful Protocols. In Proceedings of the 6th International Conference on Principles of Security and Trust (POST'17), pp. 117–140, Lecture Notes in Computer Science 10204, Springer, Uppsala, Sweden, April 2017.
doi:10.1007/978-3-662-54455-6_6
Download
[PDF] [PDF (long version)] [HTML]
Abstract
The Tamarin prover is a state-of-the-art protocol verification tool. It supports verification of both trace and equivalence properties, a rich protocol specification language that includes support for global, mutable state and allows the user to specify cryptographic primitives as an arbitrary subterm convergent equational theory, in addition to several built-in theories, which include, among others, Diffie-Hellman exponentiation.
In this paper, we improve the underlying theory and the tool to allow for more general user-specified equational theories: our extension supports arbitrary convergent equational theories that have the finite variant property, making Tamarin the first tool to support at the same time this large set of user-defined equational theories, protocols with global mutable state, an unbounded number of sessions, and complex security properties. We demonstrate the effectiveness of this generalization by analyzing several protocols that rely on blind signatures, trapdoor commitment schemes, and ciphertext prefixes that were previously out of scope.
BibTeX
@inproceedings{DDKS-post17,
abstract = {The Tamarin prover is a state-of-the-art protocol
verification tool. It supports verification of both
trace and equivalence properties, a rich protocol
specification language that includes support for
global, mutable state and allows the user to specify
cryptographic primitives as an arbitrary subterm
convergent equational theory, in addition to several
built-in theories, which include, among others,
Diffie-Hellman exponentiation.\par In this paper, we
improve the underlying theory and the tool to allow
for more general user-specified equational theories:
our extension supports arbitrary convergent
equational theories that have the finite variant
property, making Tamarin the first tool to support
at the same time this large set of user-defined
equational theories, protocols with global mutable
state, an unbounded number of sessions, and complex
security properties. We demonstrate the
effectiveness of this generalization by analyzing
several protocols that rely on blind signatures,
trapdoor commitment schemes, and ciphertext prefixes
that were previously out of scope.},
address = {Uppsala, Sweden},
author = {Dreier, Jannik and Dum\'enil, Charles and Kremer,
Steve and Sasse, Ralf},
booktitle = {{P}roceedings of the 6th International Conference on
Principles of Security and Trust (POST'17)},
month = apr,
publisher = {Springer},
series = {Lecture Notes in Computer Science},
volume = 10204,
pages = {117--140},
doi = {10.1007/978-3-662-54455-6_6},
title = {Beyond Subterm-Convergent Equational Theories in
Automated Verification of Stateful Protocols},
year = 2017,
acronym = {{POST}'17},
nmonth = 4,
url = {{https://hal.inria.fr/hal-01450916/}},
}