67 lines
1.2 KiB
Plaintext
67 lines
1.2 KiB
Plaintext
usertype TimeStamp, LifeTime;
|
|
|
|
const pk: Function;
|
|
secret sk: Function;
|
|
inversekeys (pk,sk);
|
|
|
|
protocol spliceAS(C,AS,S)
|
|
{
|
|
role C
|
|
{
|
|
const N1,N2: Nonce;
|
|
const T: TimeStamp;
|
|
const L: LifeTime;
|
|
|
|
send_1(C,AS, C, S, N1 );
|
|
read_2(AS,C, AS, {AS, C, N1, pk(S)}sk(AS) );
|
|
send_3(C,S, C, S, {C, T, L, {N2}pk(S)}sk(C) );
|
|
read_6(S,C, S, C, {S, N2}pk(C) );
|
|
|
|
claim_7(C, Secret, N2);
|
|
claim_9(C, Niagree);
|
|
claim_10(C, Nisynch);
|
|
}
|
|
|
|
role AS
|
|
{
|
|
var N1,N3: Nonce;
|
|
|
|
read_1(C,AS, C, S, N1 );
|
|
send_2(AS,C, AS, {AS, C, N1, pk(S)}sk(AS) );
|
|
read_4(S,AS, S, C, N3 );
|
|
send_5(AS,S, AS, {AS, S, N3, pk(C)}sk(AS) );
|
|
}
|
|
|
|
role S
|
|
{
|
|
const N3: Nonce;
|
|
var N2: Nonce;
|
|
var T: TimeStamp;
|
|
var L: LifeTime;
|
|
|
|
var ni: Nonce;
|
|
const nr: Nonce;
|
|
|
|
read_3(C,S, C, S, {C, T, L, {N2}pk(S)}sk(C) );
|
|
send_4(S,AS, S, C, N3 );
|
|
read_5(AS,S, AS, {AS, S, N3, pk(C)}sk(AS) );
|
|
send_6(S,C, S, C, {S, N2}pk(C) );
|
|
|
|
claim_8(S, Secret, N2);
|
|
claim_11(S, Niagree);
|
|
claim_12(S, Nisynch);
|
|
}
|
|
}
|
|
|
|
const Al,Bo,Eve: Agent;
|
|
|
|
untrusted Eve;
|
|
const ne: Nonce;
|
|
compromised sk(Eve);
|
|
|
|
run spliceAS.C(Agent,Agent,Agent);
|
|
run spliceAS.AS(Agent,Agent,Agent);
|
|
run spliceAS.S(Agent,Agent,Agent);
|
|
|
|
|