scyther/gui/Protocols/IKE/verify.sh
Cas Cremers 34d7cba293 Added IKE base models.
Modelers: Adrian Kyburz and Cas Cremers
2012-11-15 11:48:14 +01:00

150 lines
3.7 KiB
Bash
Executable File

#############################################################################
#
# NAME
# verify - batch protocol verifier script for scyther
#
# SYNOPSIS
# ./verify.sh [option]... [file]...
#
# DESCRIPTION
# Verify protocol specifications using scyther.
#
# OPTIONS
#
# -d Debug mode [false]
# -e Execution environment [cluster]
# -h Help
# -i Skip attack patterns of the form Alice talking to Alice
# -l lower bound of claims to check [1]
# -m Adversary-compromise model [ext]
# -o Output directory (attack graphs) [./graphs/]
# -r number of runs [6]
# -t timeout in s
# -u upper bound of claims to check [1]
#
# EXAMPLE
# ./verify.sh -m br -o . *.spdl
#
#############################################################################
#!/bin/bash
# Default values
CLAIM[0]=1
CLAIM[1]=1
DEBUG=false
ENV='cluster'
FILES="*.spdl"
INITUNIQUE=
MODEL='ext'
OUTDIR='./graphs'
RUNS='-r 6'
SCYTHER='../scyther/Scyther/scyther-linux'
TIMEOUT=
# Adversary-compromise models
# EXT
MODELS[0]=
# INT
MODELS[1]='--LKRothers 1'
# CA
MODELS[2]='--LKRactor 1'
# AF
MODELS[3]='--LKRafter 1'
# AFC
MODELS[4]='--LKRaftercorrect 1'
# BR
MODELS[5]='--LKRothers 1 --SKR 1 --SKRinfer' # (inferred session keys)
MODELS[6]='--LKRothers 1 --SKR 1'
# CKw
MODELS[7]='--LKRothers 1 --LKRactor 1 --LKRaftercorrect 1 --SKR 1 --SKRinfer --SSR 1'
MODELS[8]='--LKRothers 1 --LKRactor 1 --LKRaftercorrect 1 --SKR 1 --SSR 1'
# CK
MODELS[9]='--LKRothers 1 --LKRafter 1 --LKRaftercorrect 1 --SKR 1 --SKRinfer --SSR 1'
MODELS[10]='--LKRothers 1 --LKRafter 1 --LKRaftercorrect 1 --SKR 1 --SSR 1'
# eCK-1
MODELS[11]='--LKRothers 1 --SKR 1 --SKRinfer --RNR 1'
MODELS[12]='--LKRothers 1 --SKR 1 --RNR 1'
# eCK-2
MODELS[13]='--LKRothers 1 --LKRactor 1 --LKRaftercorrect 1 --SKR 1 --SKRinfer'
MODELS[14]='--LKRothers 1 --LKRactor 1 --LKRaftercorrect 1 --SKR 1'
# Parse command line arguments
while getopts “de:hil:m:o:r:t:u:” FLAG;
do
case $FLAG in
d) DEBUG=true;;
e) ENV=$OPTARG;;
i) INITUNIQUE='--init-unique';;
l) CLAIM[0]=$OPTARG;;
m) MODEL=$OPTARG;;
o) OUTDIR=$OPTARG;;
r) RUNS="-r $OPTARG";;
t) TIMEOUT="-T $OPTARG";;
u) CLAIM[1]=$OPTARG;;
h|?)
printf "Usage: %s: [-l num][-u num][-d][-e [cluster|remote|local]][-h][-m model][-o value][-r num][-t sec]file[...]\n" $(basename $0) >&2
exit 1;;
esac
done
shift $(($OPTIND - 1))
# Remaining arguments treated as specification files
if [ -n "$*" ]; then
FILES="$*"
# mkdir -p "$OUTDIR$TSTAMP"
fi
# Parse model identifiers
mflags=
case $MODEL in
int) mflags=${MODELS[1]};;
ca) mflags=${MODELS[2]};;
af) mflags=${MODELS[3]};;
afc) mflags=${MODELS[4]};;
bri) mflags=${MODELS[5]};;
br) mflags=${MODELS[6]};;
ckwi) mflags=${MODELS[7]};;
ckw) mflags=${MODELS[8]};;
cki) mflags=${MODELS[9]};;
ck) mflags=${MODELS[10]};;
eck1i) mflags=${MODELS[11]};;
eck1) mflags=${MODELS[12]};;
eck2i) mflags=${MODELS[13]};;
eck2) mflags=${MODELS[14]};;
esac
# Verify
for file in $FILES;
do
EXT=`echo "$file" | sed 's/^.*\.//'`
if [ "$EXT" == 'spdl' ]; then
# Extract protocol name
tmp=`basename $file .spdl`
p=`basename $tmp .pp`
# Execute scyther for selected models and claim
for (( c=${CLAIM[0]}; c<=${CLAIM[1]}; c++ ));
do
init="$SCYTHER $TIMEOUT --force-regular $INITUNIQUE $RUNS $mflags $file -d -o $OUTDIR/${p}_adv-${MODEL}_I$c.dot --filter=$p,I$c"
resp="$SCYTHER $TIMEOUT --force-regular $INITUNIQUE $RUNS $mflags $file -d -o $OUTDIR/${p}_adv-${MODEL}_R$c.dot --filter=$p,R$c"
if $DEBUG; then
echo $init
echo $resp
elif [ $ENV = "cluster" ]; then
bsub -W 08:00 -R "rusage[mem=4096]" $init
bsub -W 08:00 -R "rusage[mem=4096]" $resp
else # $ENV = local
time $init
time $resp
fi
done
else
printf "WARNING: %s could not be processed." $file
fi
done