1 research outputs found
Witness-Functions versus Interpretation-Functions for Secrecy in Cryptographic Protocols: What to Choose?
Proving that a cryptographic protocol is correct for secrecy is a hard task.
One of the strongest strategies to reach this goal is to show that it is
increasing, which means that the security level of every single atomic message
exchanged in the protocol, safely evaluated, never deceases. Recently, two
families of functions have been proposed to measure the security level of
atomic messages. The first one is the family of interpretation-functions. The
second is the family of witness-functions. In this paper, we show that the
witness-functions are more efficient than interpretation-functions. We give a
detailed analysis of an ad-hoc protocol on which the witness-functions succeed
in proving its correctness for secrecy while the interpretation-functions fail
to do so.Comment: Accepted at the IEEE SMC (6 two column pages) on 2017-07-1