The Eighth IEEE Computer Security Foundations Workshop (CSFW '95)
Using temporal logic to specify and verify cryptographic protocols
Kenmare, County Kerry, Ireland
March 13-March 15
ISBN: 0-8186-7033-9
J.W. Gray, III, Dept. of Comput. Sci., Hong Kong Univ. of Sci. & Technol., Kowloon, Hong Kong
J. McLean, Dept. of Comput. Sci., Hong Kong Univ. of Sci. & Technol., Kowloon, Hong Kong
We use standard linear-time temporal logic to specify cryptographic protocols, model the system penetrator, and specify correctness requirements. The requirements are specified as standard safety properties, for which standard proof techniques apply. In particular, we are able to prove that the system penetrator cannot obtain a session key by any logical or algebraic techniques. We compare our work to Meadows' method. We argue that using standard temporal logic provides greater flexibility and generality, firmer foundations, easier integration with other formal methods, and greater confidence in the verification results.
Index Terms:
temporal logic; protocols; cryptography; formal specification; formal verification; temporal logic; cryptographic protocols; specify; verify; system penetrator; correctness requirements; verification; formal methods
Citation:
J.W. Gray, III, J. McLean, "Using temporal logic to specify and verify cryptographic protocols," csfw, pp.108, The Eighth IEEE Computer Security Foundations Workshop (CSFW '95), 1995