diff --git a/gui/Protocols/MultiProtocolAttacks/ksl.spdl b/gui/Protocols/MultiProtocolAttacks/ksl.spdl new file mode 100644 index 0000000..25042a7 --- /dev/null +++ b/gui/Protocols/MultiProtocolAttacks/ksl.spdl @@ -0,0 +1,80 @@ +# KSL +# +# Modelled after the description in the SPORE library +# http://www.lsv.ens-cachan.fr/spore/ksl.html +# +# + + +usertype Server, SessionKey, TimeStamp, TicketKey; +usertype ExpiredTimeStamp; + +const a, b, e: Agent; +const s: Server; +const Fresh: Function; +const Compromised: Function; + +untrusted e; +compromised k(e,s); + + + +protocol ksl(I,R,S) +{ + role I + { + const Ni, Mi: Nonce; + var Nc, Mr: Nonce; + var T: Ticket; + var Kir: SessionKey; + + send_1(I,R, Ni, I); + read_4(R,I, { Ni,R,Kir }k(I,S), T, Nc, {Ni}Kir ); + send_5(I,R, { Nc }Kir ); + + send_6(I,R, Mi,T ); + read_7(R,I, Mr,{Mi}Kir ); + send_8(I,R, {Mr}Kir ); + + claim_I1(I,Secret, Kir); + claim_I2(I,Niagree); + claim_I3(I,Nisynch); + claim_I4(I,Empty, (Fresh, Kir)); + } + + role R + { + var Ni,Mi: Nonce; + const Nr,Nc,Mr: Nonce; + var Kir: SessionKey; + const Kbb: TicketKey; + const Tr: TimeStamp; + var T: Ticket; + + read_1(I,R, Ni, I); + send_2(R,S, Ni, I, Nr, R ); + read_3(S,R, { Nr, I, Kir }k(R,S), T ); + send_4(R,I, T, { Tr, I, Kir }Kbb, Nc, {Ni}Kir ); + read_5(I,R, { Nc }Kir ); + + read_6(I,R, Mi,{ Tr, I, Kir }Kbb ); + send_7(R,I, Mr,{Mi}Kir ); + read_8(I,R, {Mr}Kir ); + + claim_R1(R,Secret, Kir); + claim_R2(R,Niagree); + claim_R3(R,Nisynch); + claim_R4(R,Empty,(Fresh,Kir)); + } + + role S + { + var Ni, Nr: Nonce; + const Kir: SessionKey; + + read_2(R,S, Ni, I, Nr, R ); + send_3(S,R, { Nr, I, Kir }k(R,S), { Ni,R,Kir }k(I,S) ); + } +} + +