Affiliations: CNRS, École Normale Supérieure, INRIA, Paris, France
Correspondence:
[**]
Address for correspondence: École Normale Supérieure, Département d'Informatique, 45 rue d'Ulm, 75005 Paris, France. Tel.: +33 1 44 32 21 57; Fax: +33 1 44 32 21 51; E-mail: Bruno.Blanchet@ens.fr.
Note: [*] This paper is an updated and extended version of [13] and [14].
Abstract: We present a new technique for verifying correspondences in security protocols. In particular, correspondences can be used to formalize authentication. Our technique is fully automatic, it can handle an unbounded number of sessions of the protocol, and it is efficient in practice. It significantly extends a previous technique for the verification of secrecy. The protocol is represented in an extension of the pi calculus with fairly arbitrary cryptographic primitives. This protocol representation includes the specification of the correspondence to be verified, but no other annotation. This representation is then translated into an abstract representation by Horn clauses, which is used to prove the desired correspondence. Our technique has been proved correct and implemented. We have tested it on various protocols from the literature. The experimental results show that these protocols can be verified by our technique in less than 1 s.
