Little tweak to the key compromise modelling, model key compromise agent as a
responder instead of an initiator, remove empty roles from key compromise protocol.
This commit is contained in:
parent
ba47af0c42
commit
f8a91d744d
@ -16,15 +16,17 @@ const dec,inc: Function;
|
|||||||
inversekeys(dec,inc);
|
inversekeys(dec,inc);
|
||||||
usertype SessionKey;
|
usertype SessionKey;
|
||||||
|
|
||||||
protocol needhamschroederSessionKeyCompromise(I,R,S)
|
protocol needhamschroederSessionKeyCompromise(C)
|
||||||
{
|
{
|
||||||
// Disclose an entire session and the corresponding session key
|
// Read the names of 3 agents and disclose a session between them including
|
||||||
// to simulate key compromise
|
// corresponding session key to simulate key compromise
|
||||||
role I {
|
role C {
|
||||||
const Ni,Nr: Nonce;
|
const Ni,Nr: Nonce;
|
||||||
const Kir: SessionKey;
|
const Kir: SessionKey;
|
||||||
|
var I,R,S: Agent;
|
||||||
|
|
||||||
send_D1(I,I, (I,R,Ni),
|
read_C1(C,C, I,R,S);
|
||||||
|
send_C2(C,C, (I,R,Ni),
|
||||||
{Ni,R,Kir,{Kir,I}k(R,S)}k(I,S),
|
{Ni,R,Kir,{Kir,I}k(R,S)}k(I,S),
|
||||||
{Kir,I}k(R,S),
|
{Kir,I}k(R,S),
|
||||||
{Nr}Kir,
|
{Nr}Kir,
|
||||||
@ -32,13 +34,8 @@ protocol needhamschroederSessionKeyCompromise(I,R,S)
|
|||||||
Kir
|
Kir
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
role R {
|
|
||||||
}
|
}
|
||||||
|
|
||||||
role S {
|
|
||||||
}
|
|
||||||
}
|
|
||||||
protocol needhamschroedersk(I,R,S)
|
protocol needhamschroedersk(I,R,S)
|
||||||
{
|
{
|
||||||
role I
|
role I
|
||||||
|
Loading…
Reference in New Issue
Block a user