• Open Access IconOpen Access
  • Cite Icon273
  • https://doi.org/10.1109/csfw.1999.779762Copy DOI Icon

A meta-notation for protocol analysis

  • Jun 28, 1999
  • I Cervesato +4 more
Show More
  • Abstract
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

Most formal approaches to security protocol analysis are based on a set of assumptions commonly referred to as the "Dolev-Yao model". In this paper, we use a multiset rewriting formalism, based on linear logic, to state the basic assumptions of this model. A characteristic of our formalism is the way that existential quantification provides a succinct way of choosing new values, such as new keys or nonces. We define a class of theories in this formalism that correspond to finite-length protocols, with a bounded initialization phase but allowing unboundedly many instances of each protocol role (e.g., client, sewer; initiator or responder). Undecidability is proved for a restricted class of these protocols, and PSPACE-completeness is claimed for a class further restricted to have no new data (nonces). Since it is a fragment of linear logic, we can use our notation directly as input to linear logic tools, allowing us to do proof search for attacks with relatively little programming effort, and to formally verify protocol transformations and optimizations.

Similar Papers
  • Research Article
  • Citations1

Deriving Theorems in Implicational Linear Logic, Declaratively

  • Sep 19, 2020
  • Electronic Proceedings in Theoretical Computer Science
  • Paul Tarau +1
  • Research Article

Multiplicative-Additive Proof Equivalence is Logspace-complete, via Binary Decision Trees

  • Nov 30, 2017
  • Logical Methods in Computer Science
  • Marc Bagnol
  • Book Chapter
  • Citations2

Logic Programming in a Fragment of Intuitionistic Temporal Linear Logic

  • Jan 01, 2001
  • Mutsunori Banbara +3
  • Book Chapter
  • Citations1

A Linear Logic Based Approach to Timed Petri Nets

  • Feb 01, 2008
  • Norihiro Kamide
  • Research Article

The Complexity of Local Proof Search in Linear Logic: (Extended Abstract)

  • Jan 01, 1996
  • Electronic Notes in Theoretical Computer Science
  • Patrick D Lincoln +2
  • Book Chapter
  • Citations13

Call-by-Value in a Basic Logic for Interaction

  • Jan 01, 2014
  • Ulrich Schöpp
  • Research Article

A graph-theoretic characterization theorem for multiplicative fragment of non-commutative linear logic

  • Dec 07, 2002
  • Theoretical Computer Science
  • Misao Nagayama +1
  • Research Article
  • Citations13

Encryption as an abstract data-type: An extended abstract

  • Sep 01, 2003
  • Electronic Notes in Theoretical Computer Science
  • Dale Miller
  • Research Article
  • Citations19

The conjoinability relation in Lambek calculus and linear logic

  • Apr 01, 1994
  • Journal of Logic, Language and Information
  • Mati Pentus
  • Research Article
  • Citations50

Constant-only multiplicative linear logic is NP-complete

  • Dec 01, 1994
  • Theoretical Computer Science
  • Patrick Lincoln +1
  • Book Chapter
  • Citations52

From Proofs to Focused Proofs: A Modular Proof of Focalization in Linear Logic

  • Oct 20, 2010
  • Dale Miller +1
  • Research Article
  • Citations1

Glue Semantics

  • Nov 10, 2021
  • Annual Review of Linguistics
  • Ash Asudeh
  • Book Chapter
  • Citations24

Connection-based proof construction in linear logic

  • Jan 01, 1997
  • C Kreitz +3
  • Book Chapter
  • Citations16

On the Specification of Sequent Systems

  • Jan 01, 2005
  • Elaine Pimentel +1
  • Research Article
  • Citations3

From multiple sequent for additive linear logic to decision procedures for free lattices

  • Aug 01, 1999
  • Theoretical Computer Science
  • Jean-Yves Marion
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.