Deciding the Security of Protocols with Commuting Public Key Encryption

  • Authors:
  • Yannick Chevalier;Ralf Küsters;Michaël Rusinowitch;Mathieu Turuani

  • Affiliations:
  • LORIA-INRIA, France, 54506 Vandoeuvre-les-Nancy cedex, France;Department of Computer Science, Stanford University, Stanford CA 94305, USA;LORIA-INRIA, France, 54506 Vandoeuvre-les-Nancy cedex, France;LORIA-INRIA, France, 54506 Vandoeuvre-les-Nancy cedex, France

  • Venue:
  • Electronic Notes in Theoretical Computer Science (ENTCS)
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

Many cryptographic protocols and attacks on these protocols make use of the fact that the order in which encryption is performed does not affect the result of the encryption, i.e., encryption is commutative. However, most models for the automatic analysis of cryptographic protocols can not handle such encryption functions since in these models the message space is considered a free term algebra. In this paper, we present an NP decision procedure for the insecurity of protocols that employ RSA encryption, which is one of the most important instances of commuting public key encryption.