The Community for Technology Leaders
2018 IEEE Symposium on Security and Privacy (SP) (2018)
San Francisco, CA, US
May 21, 2018 to May 23, 2018
ISSN: 2375-1207
ISBN: 978-1-5386-4353-2
pp: 525-542
Vincent Cheval , Inria Nancy & Loria
Steve Kremer , Inria Nancy & Loria
Itsaka Rakotonirina , Inria Nancy & Loria
Automated verification has become an essential part in the security evaluation of cryptographic protocols. Recently, there has been a considerable effort to lift the theory and tool support that existed for reachability properties to the more complex case of equivalence properties. In this paper we contribute both to the theory and practice of this ver- ification problem. We establish new complexity results for static equivalence, trace equivalence and labelled bisimilarity and provide a decision procedure for these equivalences in the case of a bounded number of sessions. Our procedure is the first to decide trace equivalence and labelled bisimilarity exactly for a large variety of cryptographic primitives-those that can be represented by a subterm convergent destructor rewrite system. We implemented the procedure in a new tool, DEEPSEC. We showed through extensive experiments that it is significantly more efficient than other similar tools, while at the same time raises the scope of the protocols that can be analysed.
Security-protocols, Automated-verification, Equivalence-properties

V. Cheval, S. Kremer and I. Rakotonirina, "DEEPSEC: Deciding Equivalence Properties in Security Protocols -- Theory and Practice," 2018 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, US, , pp. 525-542.
358 ms
(Ver 3.3 (11022016))