Computationally Complete Symbolic Attacker and Key Exchange - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2013

Computationally Complete Symbolic Attacker and Key Exchange


Recently, Bana and Comon-Lundh introduced the notion of computationally complete symbolic attacker to deliver unconditional computational soundness to symbolic protocol verification. First we explain the relationship between their technique and Fitting's embedding of classical logic into S4. Then, based on predicates for "key usability", we provide an axiomatic system in their framework to handle secure encryption when keys are allowed to be sent. We examine both IND-CCA2 and KDM-CCA2 encryptions, both symmetric and asymmetric situations. For unforgeability, we consider INT-CTXT encryptions. This technique does not require the usual limitations of computational soundness such as the absence of dynamic corruption, the absence of key-cycles or unambiguous parsing of bit strings. In particular, if a key-cycle possibly corrupts CCA2 encryption, our technique delivers an attack. If it does not endanger security, the security proof goes through. We illustrate how our notions can be applied in protocol proofs.

Dates and versions

hal-00918848 , version 1 (15-12-2013)



Gergei Bana, Koji Hasebe, Mitsuhiro Okada. Computationally Complete Symbolic Attacker and Key Exchange. CCS 2013 - 20th ACM Conference on Computer and Communications Security, Nov 2013, Berlin, Germany. pp.1231-1246, ⟨10.1145/2508859.2516710⟩. ⟨hal-00918848⟩


59 View
0 Download



Gmail Facebook X LinkedIn More