Compiling and verifying security protocols

  • Authors:
  • Florent Jacquemard;Michaël Rusinowitch;Laurent Vigneron

  • Affiliations:
  • LORIA - INRIA Lorraine, Vandoeuvre-lès-Nancy Cedex, France;LORIA - INRIA Lorraine, Vandoeuvre-lès-Nancy Cedex, France;LORIA - Université Nancy 2, Vandoeuvre-lès-Nancy Cedex, France

  • Venue:
  • LPAR'00 Proceedings of the 7th international conference on Logic for programming and automated reasoning
  • Year:
  • 2000

Quantified Score

Hi-index 0.00

Visualization

Abstract

We propose a direct and fully automated translation from standard security protocol descriptions to rewrite rules. This compilation defines non-ambiguous operational semantics for protocols and intruder behavior: they are rewrite systems executed by applying a variant of ac-narrowing. The rewrite rules are processed by the theorem-prover daTac. Multiple instances of a protocol can be run simultaneously as well as a model of the intruder (among several possible). The existence of flaws in the protocol is revealed by the derivation of an inconsistency. Our implementation of the compiler CASRUL, together with the prover daTac, permitted us to derive security flaws in many classical cryptographic protocols.