What makes a cryptographic protocol secure? The evolution of requirements specification in formal cryptographic protocol analysis

Abstract

Much attention has been paid to the design of languages for the specification of cryptographic protocols. However, the ability to specify their desired behavior correctly is also important; indeed many perceived protocol flaws arise out of a misunderstanding of the protocol's requirements. In this talk we give a brief survey of the history of requirements specification in formal analysis of cryptographic protocols. We outline the main approaches and describe some of the open issues. © Springer-Verlag Berlin Heidelberg 2003.