scyther/testing/ibe.spdl

47 lines
829 B
Plaintext
Raw Normal View History

2006-11-21 13:40:50 +00:00
// 12/05/06
// S. Mauw
// Modeling of Identity Based Encryption primitive.
const pk: Function;
secret sk: Function;
const ibepublic: Function;
secret ibesecret: Function;
const param: Function;
inversekeys (pk,sk);
inversekeys (ibepublic,ibesecret);
protocol ibe(I,R,S)
{
role I
{
fresh ni: Nonce;
2006-11-21 13:40:50 +00:00
2012-05-02 22:26:41 +01:00
recv_1(S,I, param(S) );
2006-11-21 13:40:50 +00:00
send_3(I,R, {ni}ibepublic(param(S),R) );
claim_i1(I,Secret,ni);
}
role R
{
var ni: Nonce;
2012-05-02 22:26:41 +01:00
recv_2(S,R, {ibesecret(param(S),R)}pk(R) );
recv_3(I,R, {ni}ibepublic(param(S),R) );
2006-11-21 13:40:50 +00:00
claim_r1(R,Secret,ni);
//of course this claim is invalid
}
role S
{
send_1(S,I, param(S) );
send_2(S,R, {ibesecret(param(S),R)}pk(R) );
}
}
compromised ibesecret(param(Eve),Alice);
compromised ibesecret(param(Eve),Bob);
compromised ibesecret(param(Eve),Carol);