Synthesising Secure APIs - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Reports (Research Report) Year : 2009

Synthesising Secure APIs


Security APIs are used to define the boundary between trusted and untrusted code. The security properties of existing API are not always clear. In this paper, we give a new generic API for managing symmetric keys on a trusted cryptographic device. We state and prove security properties for the API. In particular, our API offers a high level of security even when the host machine is controlled by an attacker. Our API is generic in the sense that it can implement a wide variety of (symmetric key) protocols. As a proof of concept, we give an algorithm for automatically instantiating the API commands for a given key management protocol. We demonstrate the algorithm on a set of key establishment protocols from the Clark-Jacob suite.
Fichier principal
Vignette du fichier
RR-6882.pdf (330.53 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

inria-00369395 , version 1 (19-03-2009)


  • HAL Id : inria-00369395 , version 1


Véronique Cortier, Graham Steel. Synthesising Secure APIs. [Research Report] RR-6882, INRIA. 2009, pp.24. ⟨inria-00369395⟩
258 View
179 Download


Gmail Facebook X LinkedIn More