CV2EC: Getting the Best of Both Worlds - Inria - Institut national de recherche en sciences et technologies du numérique
Conference Papers Year : 2024

CV2EC: Getting the Best of Both Worlds

Abstract

We define and implement CV2EC, a translation from CryptoVerif assumptions on primitives to EasyCrypt games. CryptoVerif and EasyCrypt are two proof tools for mechanizing game-based proofs. While CryptoVerif is primarily suited for verifying security protocols, EasyCrypt has the expressive power for verifying cryptographic primitives and schemes. CV2EC allows us to prove security protocols in CryptoVerif and then use EasyCrypt to prove the assumptions made in CryptoVerif, either directly or by reducing them to lower-level or more standard cryptographic assumptions. We apply this approach to several case studies: we prove the multikey computational and gap Diffie-Hellman assumptions used in CryptoVerif from the standard version of these assumptions; we also prove an n-user security property of authenticated key encapsulation mechanisms (KEMs), used in the CryptoVerif study of hybrid public-key encryption (HPKE), from the 2-user version. By doing that, we discovered errors in the paper proof of this property, which we reported to the authors who then fixed their proof.
Fichier principal
Vignette du fichier
main.pdf (531.7 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Licence

Dates and versions

hal-04321656 , version 1 (04-12-2023)
hal-04321656 , version 2 (12-07-2024)

Licence

Identifiers

Cite

Bruno Blanchet, Pierre Boutry, Christian Doczkal, Benjamin Grégoire, Pierre-Yves Strub. CV2EC: Getting the Best of Both Worlds. CSF 2024 - 37th IEEE Computer Security Foundations Symposium, IEEE, Jul 2024, Enschede, Netherlands. pp.283-298, ⟨10.1109/CSF61375.2024.00019⟩. ⟨hal-04321656v2⟩
158 View
68 Download

Altmetric

Share

More