Sound Verification of Security Protocols: From Design to Interoperable Implementations - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Sound Verification of Security Protocols: From Design to Interoperable Implementations

Résumé

We provide a framework consisting of tools and metatheorems for the end-to-end verification of security protocols, which bridges the gap between automated protocol verification and code-level proofs. We automatically translate a Tamarin protocol model into a set of I/O specifications expressed in separation logic. Each such specification describes a protocol role's intended I/O behavior against which the role's implementation is then verified. Our soundness result guarantees that the verified implementation inherits all security (trace) properties proved for the Tamarin model. Our framework thus enables us to leverage the substantial body of prior verification work in Tamarin to verify new and existing implementations. The possibility to use any separation logic code verifier provides flexibility regarding the target language. To validate our approach and show that it scales to realworld protocols, we verify a substantial part of the official Go implementation of the WireGuard VPN key exchange protocol.
Fichier principal
Vignette du fichier
main.pdf (563.39 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04210887 , version 1 (19-09-2023)

Identifiants

Citer

Linard Arquint, Felix A. Wolf, Joseph Lallemand, Ralf Sasse, Christoph Sprenger, et al.. Sound Verification of Security Protocols: From Design to Interoperable Implementations. 2023 IEEE Symposium on Security and Privacy (SP), May 2023, San Francisco, United States. ⟨hal-04210887⟩
11 Consultations
79 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More