Flat and one-variable clauses: Complexity of verifying cryptographic protocols with single blind copying

  • Authors:
  • Helmut Seidl;Kumar Neeraj Verma

  • Affiliations:
  • Technische Universität München, Garching, Germany;Technische Universität München, Garching, Germany

  • Venue:
  • ACM Transactions on Computational Logic (TOCL)
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Cryptographic protocols with single blind copying were defined and modeled by Comon and Cortier using the new class C of first-order clauses. They showed its satisfiability problem to be in 3-DEXPTIME. We improve this result by showing that satisfiability for this class is NEXPTIME-complete, using new resolution techniques. We show satisfiability to be DEXPTIME-complete if clauses are Horn, which is what is required for modeling cryptographic protocols. While translation to Horn clauses only gives a DEXPTIME upper bound for the secrecy problem for these protocols, we further show that this secrecy problem is actually DEXPTIME-complete.