On the secure implementation of security protocols
2004 (English)In: Science of Computer Programming, ISSN 0167-6423, Vol. 50, no 3-Jan, 73-99 p.Article in journal (Refereed) Published
We consider the problem of implementing a security protocol in such a manner that secrecy of sensitive data is not jeopardized. Implementation is assumed to take place in the context of an API that provides standard cryptography and communication services. Given a dependency specification, stating how API methods can produce and consume secret information, we propose an information flow property based on the idea of invariance under perturbation, relating observable changes in output to corresponding changes in input. Besides the information flow condition itself, the main contributions of the paper are results relating the admissibility property to a direct flow property in the special case of programs which branch on secrets only in cases permitted by the dependency rules. These results are used to derive an unwinding theorem, reducing a behavioural correctness check (strong bisimulation) to an invariant.
Place, publisher, year, edition, pages
2004. Vol. 50, no 3-Jan, 73-99 p.
semantics-based security, confidentiality, information flow, protocol implementation, admissibility, security policy, information-flow, language
IdentifiersURN: urn:nbn:se:kth:diva-23264ISI: 000220271100005OAI: oai:DiVA.org:kth-23264DiVA: diva2:341962
QC 201005252010-08-102010-08-10Bibliographically approved