Symbolic protocol verification with dice - Université de Toulon
Article Dans Une Revue Journal of Computer Security Année : 2023

Symbolic protocol verification with dice

Résumé

Symbolic protocol verification generally abstracts probabilities away, considering computations that succeed only with negligible probability, such as guessing random numbers or breaking an encryption scheme, as impossible. This abstraction, sometimes referred to as the perfect cryptography assumption, has shown very useful as it simplifies automation of the analysis. However, probabilities may also appear in the control flow where they are generally not negligible. In this paper we consider a framework for symbolic protocol analysis with a probabilistic choice operator: the probabilistic applied π-calculus. We define and explore the relationships between several behavioral equivalences. In particular we show the need for randomized schedulers and exhibit a counter-example to a result in a previous work that relied on non-randomized ones. As in other frameworks that mix both non-deterministic and probabilistic choices, schedulers may sometimes be unrealistically powerful. We therefore consider two subclasses of processes that avoid this problem. In particular, when considering purely non-deterministic protocols, as is done in classical symbolic verification, we show that a probabilistic adversary has – maybe surprisingly – a strictly superior distinguishing power for may testing, which, when the number of sessions is bounded, we show to coincide with purely possibilistic similarity.
Fichier principal
Vignette du fichier
main.pdf (413.19 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04179875 , version 1 (10-08-2023)

Licence

Identifiants

Citer

Vincent Cheval, Raphaëlle Crubillé, Steve Kremer. Symbolic protocol verification with dice. Journal of Computer Security, 2023, pp.1-38. ⟨10.3233/JCS-230037⟩. ⟨hal-04179875⟩
92 Consultations
73 Téléchargements

Altmetric

Partager

More