A bisimulation method for cryptographic protocols

  • Authors:
  • Martín Abadi;Andrew D. Gordon

  • Affiliations:
  • Compaq Systems Research Center, 130 Lytton Ave, Palo Alto, CA;Microsoft Research, 1 Guildhall St, Cambridge CB2 3NH, United Kingdom

  • Venue:
  • Nordic Journal of Computing
  • Year:
  • 1998

Quantified Score

Hi-index 0.00

Visualization

Abstract

We introduce a definition of bisimulation for cryptographic protocols. The definition includes a simple and precise model of the knowledge of the environment with which a protocol interacts. Bisimulation is the basis of an effective proof technique, which yields proofs of classical security properties of protocols and also justifies certain protocol optimizations. The setting for our work is the spi calculus, an extension of the pi calculus with cryptographic primitives. We prove the soundness of the bisimulation proof technique within the spi calculus.