Change search
ReferencesLink to record
Permanent link

Direct link
On the secure implementation of security protocols
KTH, Superseded Departments, Computer and Systems Sciences, DSV.ORCID iD: 0000-0001-5432-6442
2004 (English)In: Science of Computer Programming, ISSN 0167-6423, Vol. 50, no 3-Jan, 73-99 p.Article in journal (Refereed) Published
Abstract [en]

We consider the problem of implementing a security protocol in such a manner that secrecy of sensitive data is not jeopardized. Implementation is assumed to take place in the context of an API that provides standard cryptography and communication services. Given a dependency specification, stating how API methods can produce and consume secret information, we propose an information flow property based on the idea of invariance under perturbation, relating observable changes in output to corresponding changes in input. Besides the information flow condition itself, the main contributions of the paper are results relating the admissibility property to a direct flow property in the special case of programs which branch on secrets only in cases permitted by the dependency rules. These results are used to derive an unwinding theorem, reducing a behavioural correctness check (strong bisimulation) to an invariant.

Place, publisher, year, edition, pages
2004. Vol. 50, no 3-Jan, 73-99 p.
Keyword [en]
semantics-based security, confidentiality, information flow, protocol implementation, admissibility, security policy, information-flow, language
URN: urn:nbn:se:kth:diva-23264ISI: 000220271100005OAI: diva2:341962
QC 20100525Available from: 2010-08-10 Created: 2010-08-10Bibliographically approved

Open Access in DiVA

No full text

Search in DiVA

By author/editor
Dam, Mads
By organisation
Computer and Systems Sciences, DSV
In the same journal
Science of Computer Programming

Search outside of DiVA

GoogleGoogle Scholar
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Total: 17 hits
ReferencesLink to record
Permanent link

Direct link