Sequential protocol composition in maude-NPA

  • Authors:
  • Santiago Escobar;Catherine Meadows;José Meseguer;Sonia Santiago

  • Affiliations:
  • DSIC-ELP, Universidad Politécnica de Valencia, Spain;Naval Research Laboratory, Washington, DC;University of Illinois at Urbana-Champaign;DSIC-ELP, Universidad Politécnica de Valencia, Spain

  • Venue:
  • ESORICS'10 Proceedings of the 15th European conference on Research in computer security
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Protocols do not work alone, but together, one protocol relying on another to provide needed services. Many of the problems in cryptographic protocols arise when such composition is done incorrectly or is not well understood. In this paper we discuss an extension to the Maude-NPA syntax and operational semantics to support dynamic sequential composition of protocols, so that protocols can be specified separately and composed when desired. This allows one to reason about many different compositions with minimal changes to the specification. Moreover, we show that, by a simple protocol transformation, we are able to analyze and verify this dynamic composition in the current Maude-NPA tool. We prove soundness and completeness of the protocol transformation with respect to the extended operational semantics, and illustrate our results on some examples.