作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2006, Vol. 32 ›› Issue (15): 137-139. doi: 10.3969/j.issn.1000-3428.2006.15.049

• 安全技术 • 上一篇    下一篇

基于Spi演算的密码协议的控制流分析

王全来1,2;王亚弟1;韩继红1   

  1. 1. 解放军信息工程大学电子技术学院,郑州 450004;2. 解放军防空兵指挥学院,郑州 450052
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2006-08-05 发布日期:2006-08-05

Control Flow Analysis of Cryptography Protocols
Based on Spi Calculus

WANG Quanlai1,2;WANG Yadi1;HAN Jihong1   

  1. 1. Institute of Electronic Technology, PLA University of Information Engineering, Zhengzhou 450004;
    2. Air Defense Forces Command College, PLA, Zhengzhou 450052
  • Received:1900-01-01 Revised:1900-01-01 Online:2006-08-05 Published:2006-08-05

摘要: 基于Spi演算和控制流分析,提出了一个密码协议的新分析方法。随后利用该方法对Beller-Chang-Yacobi MSR协议进行了分析,通过证明该协议已知的漏洞,说明该方法是正确的,并通过更深入的研究和分析,证明了该协议在并行会话攻击下是不安全的,基于此对该协议进一步改进,改进后的协议是安全的。

关键词: Spi演算, 认证, 并行会话攻击

Abstract: Based on the concepts of the Spi calculus and the control flow analysis, a new technique is presented to analyze the cryptographic protocols. Then it uses the technique to analyze the Beller-Chang-Yacobi MSR protocol. The technique is correct by verifying the known flaws, and through the detailed research and analysis, it proofs the protocol is unsecured under parallel session attack. Based on this, it proves the MSR protocol is secure.

Key words: Spi calculus, Authentication, Parallel session attack