Abstract

This paper presents a methodology to facilitate the design and analysis of secure cryptographic protocols. This work is based on a novel notion of a fail-stop protocol, which automatically halts in response to any active attack. This paper suggests types of protocols that are fail-stop, outlines some proof techniques for them, and uses examples to illustrate how the notion of a failstop protocol can make protocol design easier and can provide a more solid basis for some proposed protocol analysis methods.

Citations

3116	Communicating sequential processes - Hoare - 1978
2292	New Directions in Cryptography - Diffie, Hellman
1040	Private Authentication - Abadi - 2003
872	On the security of public key protocols - Dolev, Yao - 1983
783	Using encryption for authentication in large networks of computers - Needham, Schroeder - 1978
725	the Ordering of Events in a Distributed System - Time - 1978
332	Prudent engineering practice for cryptographic protocols - Abadi, Needham - 1990
326	Kerberos: An authentication service for computer networks - Neuman, Ts’o - 1994
279	Fail-stop processors: an approach to designing fault-tolerant computing systems - Schlichting, Schneider - 1983
252	Why cryptosystems fail - Anderson - 1994
234	New directions in cryptography - e, Hellman - 1976
221	Timestamps in key distribution protocols - Denning, Sacco - 1981
176	Reasoning about belief in cryptographic protocols - Gong, Needham, et al. - 1990
130	Byzantine generals in action: Implementing fail-stop processors - Schneider - 1984
128	Three systems for cryptographic protocol analysis - Kemmerer, Meadows, et al. - 1994
112	E cient and Timely Mutual Authentication - Otway, Rees - 1987
107	Protecting poorly chosen secrets from guessing attacks - Gong, Lomas, et al. - 1993
97	On unifying some cryptographic protocol logics - Syverson, Oorschot - 1998
89	Integrating security in a large distributed system - Satyanarayanan - 1989
69	Automatically increasing the fault-tolerance of distributed algorithms - Neiger, Toueg - 1990
68	A model for secure protocols and their composition - Heintze, Tygar - 1996
67	Formal Methods and the Certification of Critical Systems - Rushby - 1993
55	Authentication and delegation with smart-cards - KAUFMAN - 1991
48	A note on the use of timestamps as nonces - Neuman, Stubblebine - 1993
43	On message integrity in cryptographic protocols - Stubblebine, Gligor - 1992
43	Adding Time to a Logic of Authentication - Syverson - 1993
40	Secure Communication Using Remote Procedure Calls - Birrell - 1985
25	R.M.,"Rejoinder to Nessett - Burrows, Abadi, et al. - 1990
24	A Critique of the Burrows - Nessett - 1990
23	Denial of Service - Needham - 1994
21	Exploring the BAN Approach to Protocol Analysis - Snekkenes
20	A Nonce-Based Protocol for Multiple Authentications - Kehne, Schonwalder, et al. - 1992
18	Network security via private-key certificates - D, SWICK - 1990
14	Knowledge, Belief, and Semantics in the Analysis of Cryptographic Protocols - Syverson - 1992
12	A semantics for a logic of authentication (extended abstract - Abadi, Tuttle - 1991
9	The search for tractable ways of reasoning about programs - Jones - 1992
5	On the security effectiveness of cryptographic protocols - Kailar, Gligor, et al. - 1994
5	Protecting the Integrity of Privacy-enhanced Electronic Mail with DES-based Authentication Codes - Stubblebine, Gligor - 1993
3	On the Security E ectiveness of Cryptographic Protocols - Kailar, Gligor, et al. - 1994
2	States of Knowledge in Cryptographic Protocols. Unpublished manuscript - Merritt, Wolper - 1985
2	Formal Methods and the Certi cation of Critical Systems - Rushby - 1993
1	Thoughts on Cryptographic Protocols. Talk at the Cambridge - Gong - 1993
1	Initial Thought on Secure Protocols Interaction. Talk at the Cambridge - Gong - 1994