ccremers
b2e40e07f3
- Some more work on hidelevel backbone.
...
- Added '--count-states' switch for the Arachne engine.
2006-02-22 08:24:29 +00:00
ccremers
bb7259a1ad
- Removed some too interesting pruning methods that really need theorems
...
first. Revealed by the certified e-mail protocol by Abadi and
Blanchet.
2006-01-17 16:18:26 +00:00
ccremers
da75862d82
- Huge code documentation effort.
2006-01-02 21:06:08 +00:00
ccremers
6676266f4a
- More refactoring to improve the code.
2006-01-02 20:18:47 +00:00
ccremers
e6505a72a3
- Further refactoring.
...
- Some cleanup.
2006-01-02 19:55:34 +00:00
ccremers
a5acc4984a
- More refactoring for Arachne. Slowly we're getting somewhere.
2006-01-02 19:19:23 +00:00
ccremers
e592a0a432
- Refactoring code: splitting stuff out of arachne.c
2006-01-02 18:43:25 +00:00
ccremers
e21627442a
- Added 'singular' directive for roles. Syntax:
...
protocol ns3 (I,R)
{
singular role I:
{
}
}
2006-01-02 16:05:53 +00:00
ccremers
3b897c3872
- Added '--check' switch, to see whether your protocol terminates at all
...
if there is no intruder.
- Restructered many switches.
2005-12-29 12:52:51 +00:00
ccremers
a50245734d
- Fixed the broken '--no-intruder' switch.
2005-12-29 12:14:21 +00:00
ccremers
ca4c5674ac
- Added check for non-used variables.
2005-12-27 13:44:12 +00:00
ccremers
28774cb94c
- Moved dot output (finally) into a separate file, and made some minor
...
improvements.
2005-12-27 11:50:46 +00:00
ccremers
c4628e8be6
- Added support for more intelligent bounding. Fairly untested at the
...
moment.
2005-12-27 11:19:45 +00:00
ccremers
c20810def5
- Added preliminary support for singular attack output.
2005-12-27 10:49:22 +00:00
ccremers
e82ce8b962
- Added --no-intruder switch, but it is currently broken.
2005-12-21 19:02:41 +00:00
ccremers
6543a8f659
- Added '--extravert' switch, which avoids initiator Alice to talk to
...
Alice.
2005-11-29 09:15:16 +00:00
ccremers
76666404b0
- Added '--concrete' switch to fill in to pick readable names for
...
variables.
2005-11-12 21:13:00 +00:00
ccremers
9f8f04c41c
- Switched to the new consistency checking base.
2005-10-08 20:47:31 +00:00
ccremers
5b73d707a0
- Rewrite of actor/agent type consitency code: now more aware of
...
initiator/responder difference.
2005-09-09 10:05:29 +00:00
ccremers
e104dddbfb
- Added a switch to number the limit of intruder actions.
...
Initial testing suggests it does not influence the number of states
much for values of 2 and higher.
2005-08-21 21:38:32 +00:00
ccremers
1ee77472a0
- --max-attacks=AnyGijsNumber.
2005-08-15 12:49:32 +00:00
ccremers
cb315aafc8
- Added '--extend-trivial' switch. This is not a complete '--extend'
...
algorithm, as it is pretty dumb, but it works in most cases. Use with
care.
2005-08-12 12:13:50 +00:00
ccremers
2cd9cf4148
- Added random goal picker. Untested.
2005-08-01 12:59:30 +00:00
ccremers
164e325659
- New attack attribute.
2005-07-01 13:25:54 +00:00
ccremers
b6e9841c0f
- Moved special terms into their own (very) special file.
2005-06-16 14:10:07 +00:00
ccremers
db18b203a9
- Added "Empty" claim type, which is ignored.
...
Syntax example: claim_x(I, Empty);
2005-06-16 11:59:44 +00:00
ccremers
1bdaf7b5d9
- Large rewrite of switch code. Instead of having switch parameters in
...
the (monstrously large) system structure, there is now a global
'switchdata' structure originating in switches.c. This makes it much
easier to see what's happening.
* Note: although this code has been tested, there might be some
hiccups, because doing multiple search&replace actions over all
files is bound to cause some problems.
2005-06-07 15:02:27 +00:00
ccremers
1331f5e7a3
- Added a global attack id, starting at one. Currently only shown in
...
XML and Dot output. For Dot, it is included in the label. For XML, it
is an added attribute of the 'attack' tag.
2005-06-07 13:40:56 +00:00
ccremers
4a42604cb6
- Added Ticket basic term type. Note that this only has consequences for
...
the Arachne type checking. The net result is that a variable of type
'Ticket' can always contain any term, even with -m0 or -m1 matching.
2005-06-02 12:14:28 +00:00
ccremers
0540b744e2
- Repaired a pruning method that still needed a lemma. It was a bit
...
overzealous and killed a woolam-mutual attack.
2005-05-19 14:43:32 +00:00
ccremers
f22ce0dcb9
- Big change in the Arachne algorithm: decryptor sequences now get
...
expanded explicitly. This solves a long-standing issue with {k}k
decryption to yield k. Needs some testing to ensure that it did not
introduce any new errors.
2005-05-17 18:45:01 +00:00
ccremers
71558706a6
- XML output should be workable now.
2005-05-02 13:38:45 +00:00
ccremers
924abc065d
- Added xml output switch (-x, check scyther --help). It's not complete
...
yet, to be finished tomorrow.
2005-05-01 13:32:50 +00:00
ccremers
8e1041b567
- Minor output fixes.
2005-04-21 12:04:45 +00:00
ccremers
9271cc7624
- Matching method propagation was wrong in new switch code.
...
- Some fixes for protocols that do not include matching send/read
combo's. In particular, the max encryption level method ranged over
the sends; now over all events. Maybe it can range over read events
only?
2005-04-18 05:51:25 +00:00
ccremers
88e2f3d26c
- Added a better reverse-engineered variation of the Athena goal
...
selector.
- Added an idea that might make searches somewhat faster.
2005-03-11 20:41:59 +00:00
ccremers
c8df32c7a2
- Minor improvements.
...
* Old bindings detections (immediately binds them to older binding)
* Know_only derivation for keylevel lemmas.
2005-03-08 13:02:16 +00:00
ccremers
291353a14f
- Improved version of the latex renderer of arachne attacks. Still not
...
usable, however.
2005-03-07 19:02:08 +00:00
ccremers
197117f2fe
- Made a start with the arachne latex output. It's a mess currently.
2005-03-07 15:38:01 +00:00
ccremers
5c90a5af29
- Improved the .dot output format quite a bit.
2005-02-21 15:12:59 +00:00
ccremers
820c2caed8
- Revisited type matching conditions.
...
- Introduced tuple unfolding stuff for Arachne. -m2 should work now.
2005-01-14 18:18:40 +00:00
ccremers
d5cdac84cc
- Some unfolding of tuple goals towards getting -m2 Arachne to work.
2005-01-14 14:08:01 +00:00
ccremers
b607b1e260
- If we run into the time bound, report it.
2005-01-14 13:01:31 +00:00
ccremers
e0e56964d1
- Added a --timer=x switch to abort Arachne proofs after x seconds.
2005-01-05 15:29:27 +00:00
ccremers
45c42408dd
- Added weight level to proof output in <..> notation.
...
- Added selection factor for singular variables (not rolenames)
2004-12-29 19:40:12 +00:00
ccremers
54ccd5179e
- Added a new selector that picks goals that are local variables.
2004-12-29 16:05:32 +00:00
ccremers
d425bdb850
- For now, set equal weights to the parameters.
2004-12-29 14:24:33 +00:00
ccremers
5e695097f2
- Reimplemented the weight functions for goal selection.
...
- Added --goal-select function, defaults to 3.
2004-12-29 14:17:49 +00:00
ccremers
635470d976
- Added -d switch.
2004-12-09 15:27:50 +00:00
ccremers
b56c01c422
- Added '--max-depth=X' switch (which is equal to the old '-l X -a')
...
- Modified semantics of -l with -a : this corresponds more to the
intuition and introduces the new option to prune proofs based on trace
length.
2004-12-09 15:11:45 +00:00
ccremers
4f36181c3c
- Removed debugging stuff, now that the memory stuff is solved. It
...
turned out that I solved the memory leak first, and then spent an
afternoon finding the 8 blocks. These were simply not being given back
by memrealloc, which I should have guessed.
2004-12-09 13:34:36 +00:00
ccremers
c690b0622a
- More cleanup and comments.
2004-12-08 19:30:26 +00:00
ccremers
3ca180d968
- Despite a full afternoon of debugging, semiRunCreate/Destroy still
...
lose 8 blocks. I'm fairly confused.
2004-12-08 16:25:27 +00:00
ccremers
506e42f841
- Re-indented the files.
2004-11-16 12:07:55 +00:00
ccremers
a38925c9c2
- Added some useful macros to term.h to address subparts (e.g.
...
TermOp1(t)). Renamed all uses.
2004-11-16 12:06:36 +00:00
ccremers
0ec70b9de0
- Added lots of debugging info.
2004-10-28 15:23:16 +00:00
ccremers
3673fc689d
- Improved roledef printing by adding roledefPrintShort.
2004-10-28 12:56:13 +00:00
ccremers
61457b5f3d
- Fixed the agentsOfRunPrint output. It was caused by the agent adding
...
order.
- Fixed the pruning bug, which was related to this.
2004-10-28 12:33:57 +00:00
ccremers
9a24bb0f21
- Somehow, agentOfRunRole is playing up. I found a bug in the pruning
...
(untrusted actors), but the fix did not work. It's maybe due to the
roleInstance variants.
2004-10-27 16:20:12 +00:00
ccremers
461a040d29
- Revised Arachne dot output significantly. It is now based on explicit
...
ranking instead of the subgraphs. This will make it easier to layout
e.g. LaTeX MSCs using the same algorithm.
2004-10-27 16:10:58 +00:00
ccremers
2680a2ca7a
- Added rank calculation and output. If the subgraphs are removed, this
...
will allow for better positioning of the graphs. It also helps a lot
for latex output. In fact, latex output is fairly trivial now.
2004-10-25 14:28:53 +00:00
ccremers
94b3ac7c96
- Added debug code for dot output.
...
- Push/pop goals are counted now, making the child parameter obsolete.
2004-10-18 13:04:34 +00:00
ccremers
d33ec486ce
- Modified -l switch to also serve as proof depth limit.
2004-10-14 15:25:28 +00:00
ccremers
ba832159b1
- Added a new prioritylevel for seemingly public keys, but the splice-as
...
problem remains.
2004-10-14 15:09:48 +00:00
ccremers
8b48aade68
- Huge effort to make match type 2 (typeflaw generic) matching work.
...
Problem with goals that turn into tuples, will have to be solved.
2004-08-31 14:31:06 +00:00
ccremers
0e9b7dcf11
- Some added error/bounds detection all around.
2004-08-31 12:35:05 +00:00
ccremers
f5ab30995c
- Removed the debugging output.
2004-08-30 22:09:44 +00:00
ccremers
5c90522c55
- Fixed a bug in the pruning algorithm, where intruder runs were also
...
checked for agent lists, which is false.
2004-08-30 22:08:44 +00:00
ccremers
b04bc86185
- Some minor cleanups.
2004-08-30 21:49:51 +00:00
ccremers
4832e9116c
- Added pruning theorem for untrusted actors.
2004-08-30 21:07:45 +00:00
ccremers
d43e3d432f
- Ignoring singular variables seems to be a smart choice, although it
...
implies that the intruder can generate any type. That is not conform
the usual semantics. So we either change the usual semantics (wise) or
we make this choice optional.
2004-08-30 20:48:11 +00:00
ccremers
02041cfbab
- Fixed binding displays.
...
- Improved attack dot output.
- goal_graph_create now takes originator assumption into account.
2004-08-30 13:57:16 +00:00
ccremers
1d431dc6f1
- Attack output is a bit broken now for Arachne. Fix.
2004-08-30 06:07:17 +00:00
ccremers
25fa261e30
- Added some comments.
2004-08-28 14:05:38 +00:00
ccremers
c907c1f657
- Added prefixed start nodes to indicate agent initiative in dot output.
2004-08-28 14:00:48 +00:00
ccremers
391c939b83
- New algorithm to draw bindings between runs. Much cleaner.
2004-08-28 13:47:37 +00:00
ccremers
b349b6cef2
- More improvements to the dot output.
2004-08-28 12:42:11 +00:00
ccremers
acb89922f1
- Singular variables need to be bound as well (to ensure ordering is
...
correct w.r.t. e.g. nonces, if the intruder cannot construct them.)
2004-08-28 12:20:50 +00:00
ccremers
2ddd1eee13
- Improved dot output for Arachne attacks.
2004-08-28 11:43:06 +00:00
ccremers
9d64b837db
- Improved roledef printing for NULL, NULL roles (intruder)
...
- Added graph output in dot format.
2004-08-28 09:24:30 +00:00
ccremers
4420e06e4e
- Ignore choose actions when determining Arachne trace length.
2004-08-27 19:15:24 +00:00
ccremers
957b920b98
- Added extra Arachne check for -r0.
2004-08-27 18:26:19 +00:00
ccremers
17ad6de97b
- Semistate printing now reports trace length.
...
- Pruning was wrong, so the shortest attack wasn't always found. Now it
is.
2004-08-27 18:18:16 +00:00
ccremers
198afa135e
- Implemented attack length scanner per claim. Not stored yet.
2004-08-27 18:09:09 +00:00
ccremers
6ccb09297a
- Better prune adherence.
2004-08-27 17:37:43 +00:00
ccremers
f90f16fe93
- Arachne engine now respects --prune=2 (and thus the default setting)
...
somewhat. There is no good definition of length yet, so we don't do
this yet.
2004-08-27 17:35:23 +00:00
ccremers
21b2c27320
- Niagree claim seems to be working fine now.
2004-08-27 17:25:38 +00:00
ccremers
2decf44bd2
- Checks are now in. Untested though.
2004-08-27 15:02:33 +00:00
ccremers
d7e49028c1
- Added pruning of functions the intruder does not know (e.g. SK)
2004-08-20 14:55:34 +00:00
ccremers
851044ecd0
- Improved the SK lemma, but it is NOT correct yet.
2004-08-20 11:47:00 +00:00
ccremers
72d52a6e12
- Key goals now have priority. This strategy yields complete proofs for
...
e.g. bke, and reduces states for NSL.
2004-08-20 10:52:40 +00:00
ccremers
baae7ef94a
- The proofs now also show a list of open goals at each step.
2004-08-20 09:53:44 +00:00
ccremers
be44ed047a
- Fixed some goal selection issues.
...
- Added note about mirroring model checker semantics.
2004-08-20 09:21:39 +00:00
ccremers
bd84625ae4
- Fixed some more problems. Seems to be stable, although pruning is not
...
sufficient. Investigate bke-broken.
2004-08-19 15:30:31 +00:00
ccremers
f2bc78cc1f
- Improved proof output.
2004-08-19 14:55:21 +00:00
ccremers
8fa7c4e839
- Fixed bug in printing.
...
- Algorithm should work again.
2004-08-19 14:52:17 +00:00
ccremers
f25f0abd4e
- Fixed a memory error.
2004-08-19 14:49:03 +00:00
ccremers
5c15c21832
- Reports on completeness of proofs.
2004-08-19 13:09:35 +00:00
ccremers
15580c6ec9
- Added subrun counters.
2004-08-19 12:47:53 +00:00
ccremers
be2df84f91
- Much improvements to the proof output.
2004-08-19 12:35:51 +00:00