A Machine-Checked Proof of Security for AWS Key Management Service - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2019

A Machine-Checked Proof of Security for AWS Key Management Service

Résumé

We present a machine-checked proof of security for the domain management protocol of Amazon Web Services’ KMS (Key Management Service) a critical security service used throughout AWS and by AWS customers. Domain management is at the core of AWS KMS; it governs the top-level keys that anchor the security of encryption services at AWS. We show that the protocol securely implements an ideal distributed encryption mechanism under standard cryptographic assumptions. The proof is machine-checked in the EasyCrypt proof assistant and is the largest EasyCrypt development to date.
Fichier principal
Vignette du fichier
main.pdf (1.85 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-02404540 , version 1 (11-12-2019)

Identifiants

Citer

José Bacelar Almeida, Manuel Barbosa, Gilles Barthe, Matthew Campagna, Ernie Cohen, et al.. A Machine-Checked Proof of Security for AWS Key Management Service. ACM CCS 2019 - 26th ACM Conference on Computer and Communications Security, Nov 2019, London, United Kingdom. pp.63-78, ⟨10.1145/3319535.3354228⟩. ⟨hal-02404540⟩
98 Consultations
128 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More