Sound Verification of Security Protocols: From Design to Interoperable Implementations
METADATA ONLY
Loading...
Author / Producer
Date
2023
Publication Type
Conference Paper
ETH Bibliography
yes
Citations
Altmetric
METADATA ONLY
Data
Rights / License
Abstract
We provide a framework consisting of tools and metatheorems for the end-to-end verification of security protocols, which bridges the gap between automated protocol verification and code-level proofs. We automatically translate a Tamarin protocol model into a set of I/O specifications expressed in separation logic. Each such specification describes a protocol role's intended I/O behavior against which the role's implementation is then verified. Our soundness result guarantees that the verified implementation inherits all security (trace) properties proved for the Tamarin model. Our framework thus enables us to leverage the substantial body of prior verification work in Tamarin to verify new and existing implementations. The possibility to use any separation logic code verifier provides flexibility regarding the target language. To validate our approach and show that it scales to realworld protocols, we verify a substantial part of the official Go implementation of the WireGuard VPN key exchange protocol.
Permanent link
Publication status
published
External links
Editor
Book title
2023 IEEE Symposium on Security and Privacy (SP)
Journal / series
Volume
Pages / Article No.
1077 - 1093
Publisher
IEEE
Event
44th IEEE Symposium on Security and Privacy (SP 2023)
Edition / version
Methods
Software
Geographic location
Date collected
Date created
Subject
Protocol verification; Symbolic security; Automated verification; Tamarin; Separation logic; Implementation
Organisational unit
03653 - Müller, Peter / Müller, Peter
03634 - Basin, David / Basin, David
Notes
Funding
Related publications and datasets
Is new version of: