Union and intersection types for secure protocol implementations

Authors:
Michael Backes;Cătălin Hriţcu;Matteo Maffei
Affiliations:
Saarland University, Germany;Saarland University, Germany;Saarland University, Germany
Venue:
TOSCA'11 Proceedings of the 2011 international conference on Theory of Security and Applications
Year:
2011

Citing 34
Cited 3

Subtyping recursive types

ACM Transactions on Programming Languages and Systems (TOPLAS)
Design of the programming language FORSYTHE

ALGOL-like Languages, Volume 1
A calculus for cryptographic protocols

Information and Computation
Intersection types and computational effects

ICFP '00 Proceedings of the fifth ACM SIGPLAN international conference on Functional programming
Timestamps in key distribution protocols

Communications of the ACM
Mobile values, new names, and secure communication

POPL '01 Proceedings of the 28th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Protection in programming languages

Communications of the ACM
Positive Recursive Type Assignment

MFCS '95 Proceedings of the 20th International Symposium on Mathematical Foundations of Computer Science
Breaking and Fixing the Needham-Schroeder Public-Key Protocol Using FDR

TACAs '96 Proceedings of the Second International Workshop on Tools and Algorithms for Construction and Analysis of Systems
Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1

CRYPTO '98 Proceedings of the 18th Annual International Cryptology Conference on Advances in Cryptology
Secrecy types for asymmetric communication

Theoretical Computer Science - Foundations of software science and computation structures
An Efficient Cryptographic Protocol Verifier Based on Prolog Rules

CSFW '01 Proceedings of the 14th IEEE workshop on Computer Security Foundations
Tridirectional typechecking

Proceedings of the 31st ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Intersection types and bounded polymorphism

Mathematical Structures in Computer Science
Direct anonymous attestation

Proceedings of the 11th ACM conference on Computer and communications security
Analyzing security protocols with secrecy types and logic programs

Journal of the ACM (JACM)
Verified Interoperable Implementations of Security Protocols

CSFW '06 Proceedings of the 19th IEEE workshop on Computer Security Foundations
Formal analysis of Kerberos 5

Theoretical Computer Science - Automated reasoning for security protocol analysis
A bisimulation for dynamic sealing

Theoretical Computer Science
Analysis of the SSL 3.0 protocol

WOEC'96 Proceedings of the 2nd conference on Proceedings of the Second USENIX Workshop on Electronic Commerce - Volume 2
A Type Discipline for Authorization in Distributed Systems

CSF '07 Proceedings of the 20th IEEE Computer Security Foundations Symposium
Liquid types

Proceedings of the 2008 ACM SIGPLAN conference on Programming language design and implementation
Refinement Types for Secure Implementations

CSF '08 Proceedings of the 2008 21st IEEE Computer Security Foundations Symposium
Civitas: Toward a Secure Voting System

SP '08 Proceedings of the 2008 IEEE Symposium on Security and Privacy
Zero-Knowledge in the Applied Pi-calculus and Automated Verification of the Direct Anonymous Attestation Protocol

SP '08 Proceedings of the 2008 IEEE Symposium on Security and Privacy
Type-checking zero-knowledge

Proceedings of the 15th ACM conference on Computer and communications security
Cryptographically verified implementations for TLS

Proceedings of the 15th ACM conference on Computer and communications security
Types and higher-order recursion schemes for verification of higher-order programs

Proceedings of the 36th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Achieving Security Despite Compromise Using Zero-knowledge

CSF '09 Proceedings of the 2009 22nd IEEE Computer Security Foundations Symposium
Modular verification of security protocol code by typing

Proceedings of the 37th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Z3: an efficient SMT solver

TACAS'08/ETAPS'08 Proceedings of the Theory and practice of software, 14th international conference on Tools and algorithms for the construction and analysis of systems
Computationally sound verification of source code

Proceedings of the 17th ACM conference on Computer and communications security
HMC: verifying functional programs using abstract interpreters

CAV'11 Proceedings of the 23rd international conference on Computer aided verification
Cryptographic protocol analysis on real c code

VMCAI'05 Proceedings of the 6th international conference on Verification, Model Checking, and Abstract Interpretation

Cryptographic verification by typing for a sample protocol implementation

Foundations of security analysis and design VI
Logical foundations of secure resource management in protocol implementations

POST'13 Proceedings of the Second international conference on Principles of Security and Trust
Union, intersection and refinement types and reasoning about type disjointness for secure protocol implementations

Journal of Computer Security - Foundational Aspects of Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

We present a new type system for verifying the security of cryptographic protocol implementations. The type system combines prior work on refinement types, with union, intersection, and polymorphic types, and with the novel ability to reason statically about the disjointness of types. The increased expressivity enables the analysis of important protocol classes that were previously out of scope for the type-based analyses of protocol implementations. In particular, our types can statically characterize: (i ) more usages of asymmetric cryptography, such as signatures of private data and encryptions of authenticated data; (ii ) authenticity and integrity properties achieved by showing knowledge of secret data; (iii ) applications based on zero-knowledge proofs. The type system comes with a mechanized proof of correctness and an efficient type-checker.