Premium
Formal analysis of some secure procedures for certificate delivery
Author(s) -
Martinelli Fabio,
Petrocchi Marinella,
Vaccarelli Anna
Publication year - 2006
Publication title -
software testing, verification and reliability
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.216
H-Index - 49
eISSN - 1099-1689
pISSN - 0960-0833
DOI - 10.1002/stvr.329
Subject(s) - computer science , cryptographic protocol , certificate , cryptography , protocol (science) , computer security , formal methods , cryptographic primitive , certificate authority , software engineering , software , public key cryptography , theoretical computer science , programming language , encryption , medicine , alternative medicine , pathology
Abstract This paper describes and formally analyses two communication protocols that manage the secure emission of digital certificates. The formal analysis is carried out by means of a software tool for the automatic verification of cryptographic protocols with finite behaviour. The tool is able to discover, at a conceptual level, attacks against security procedures. The methodology is general enough to be applied to several kinds of cryptographic procedures and protocols. It is the opinion of the authors that this approach contributes towards a better understanding of the structure and aims of a protocol, for developers, analysers and final users. Copyright © 2005 John Wiley & Sons, Ltd.