Abstract:The formal verification of cryptographic protocols has been extensively studied in recent years. To verify the cryptographic protocol security, formal verification tools consider protocol properties as interactive processes involving a cryptographic functionality. In general, we formally define a cryptographic functionality as an abstract function. However, the actual cryptographic protocols used comprise complex combinations of cryptographic functionalities. Thus, we may not determine if the protocol is secure, even when the cryptographic protocol security with cryptographic functionalities is verified using verification tools. Increasing the reliability of the verification results necessitates the verification of the security properties of these algorithms using ProVerif. Many cryptographic algorithms have been designed as iterative algorithms. These include the Merkle and Damgård construction (MD construction) method for cryptographic hash functions and the cipher block chaining mode (CBC mode) for the block cipher mode of operation. However, formalizing an iterative execution is difficult in ProVerif. Thus, we propose a method for formalizing a model of iterative executions. In the proposed method, we describe to formalize iterative execution as a formal model of function calls. We demonstrate the validity of our proposed method by formally verifying the safety of the MD construction method, which behaves like an iterative execution by including a one-way compression function and internal variables changed by the output of these functions. We also present a method for formalizing a common block cipher mode of operation (i.e., CBC mode) used in the proposed method to handle iterative execution.

Molly: A Verified Compiler for Cryptoprotocol Roles

Introducing Molly: Distributed Memory Parallelization with LLVM

Language-Based Security for Low-Level MPC

Sound Verification of Security Protocols: From Design to Interoperable Implementations (extended version)

A Formalization of Operads in Coq

Extracting functional programs from Coq, in Coq

On formal verification of arithmetic-based cryptographic primitives

SMLtoCoq: Automated Generation of Coq Specifications and Proof Obligations from SML Programs with Contracts

Completely Automated Equivalence Proofs

CryptoBap: A Binary Analysis Platform for Cryptographic Protocols

How to Formalize Loop Iterations in Cryptographic Protocols Using ProVerif

Modular Certification of Low-Level Intermediate Representation Programs

Reliably Reproducing Machine-Checked Proofs with the Coq Platform

Formally Verified Native Code Generation in an Effectful JIT -- or: Turning the CompCert Backend into a Formally Verified JIT Compiler

The Inductive Approach to Verifying Cryptographic Protocols

A Generic Methodology for the Modular Verification of Security Protocol Implementations (extended version)

Towards Trustworthy Automated Program Verifiers: Formally Validating Translations into an Intermediate Verification Language (extended version)

Cameleer: a Deductive Verification Tool for OCaml (extended version)

Sound Transpilation from Binary to Machine-Independent Code

User-Guided Verification of Security Protocols via Sound Animation

DeepSec: Deciding Equivalence Properties for Security Protocols -- Improved theory and practice