Symbolic Analysis of Identity-Based Protocols - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Book Sections Year : 2019

Symbolic Analysis of Identity-Based Protocols


We show how the Tamarin tool can be used to model and reason about security protocols using identity-based cryptography, including identity-based encryption and signatures. Although such protocols involve rather different primitives than conventional public-key cryptography , we illustrate how suitable abstractions and Tamarin's support for equational theories can be used to model and analyze realistic industry protocols, either finding flaws or gaining confidence in their security with respect to different classes of adversaries. Technically, we propose two models of identity-based cryptography. First, we formalize an abstract model, based on simple equations, in which verification of realistic protocols is feasible. Second, we formalize a more precise model, leveraging Tamarin's support for bilinear pairing and exclusive-or. This model is much closer to practical realizations of identity-based cryptography, but deduction is substantially more complex. Along the way, we point out the limits of precise modeling and highlight challenges in providing support for equational reasoning. We evaluate our models on an industrial protocol case study, where we find and fix flaws.
Fichier principal
Vignette du fichier
IDbased.pdf (453.59 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-02368842 , version 1 (21-09-2020)



David Basin, Lucca Hirschi, Ralf Sasse. Symbolic Analysis of Identity-Based Protocols. Springer. Foundations of Security, Protocols, and Equational Reasoning, Springer (11565), pp.112-134, 2019, LNCS, ⟨10.1007/978-3-030-19052-1_9⟩. ⟨hal-02368842⟩
117 View
108 Download



Gmail Facebook X LinkedIn More