Breaking and fixing the Needham-Schroeder public-key protocol using FDR

Software-Concepts and Tools

Volumn 17, Issue 3, 1996, Pages 93-102

  Lowe, Gavin ^a  

^a UNIVERSITY OF OXFORD   (United Kingdom)

Author keywords

Authentication protocol; Cryptography; Failures Divergency Refinement Checker; FDR; Needham Schroeder public key protocol; Protocol; Protocol failure; Security

Indexed keywords

EID: 26444574191     PISSN: 09458115     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (15)

1. Boyd C (November 1990) Hidden Assumptions in Cryptographic Protocols. Proceedings of the IEE, 137, Part E(6):433-436
2. Burrows M, Abadi M, Needham R (1989) A Logic of Authentication. Proceedings of the Royal Society of London A, 426:233-271 (A preliminary version appeared as Digital Equipment Corporation Systems Research Center report No. 39, 1989)
3. CASPER: A Compiler for the Analysis of Security Protocols. Information available via http:// www.comlab.ox.ac.uk/oucl/users/gavin.lowe/ Security/Casper/index.html.
4. Denning DE, Sacco GM (1981) Timestamps in Key Distribution Protocols. Communications of the ACM, 24(8):533-536
5. Diffie W, Hellman M (1976) New Directions in Cryptography. IEEE Transactions on Information Theory, 22:644-654
6. Formal Systems (Europe) Ltd. Failures Divergence Renement - User Manual and Tutorial (1993) Version 1.3.
7. Hoare CAR (1985) Communicating Sequential Processes. Prentice Hall
8. Lowe G (1995) An Attack on the Needham-Schroeder Public-Key Authentication Protocol. Information Processing Letters, 56:131-133
9. Needham R, Schroeder M (1978) Using Encryption for Authentication in Large Networks of Computers. Communications of the ACM, 21(12):993-999
10. Rivest RL, Shamir A, Adleman L (February 1978) A Method for Obtaining Digital Signatures and Public-Key Cryptosystems. Communications of the ACM, 21(2):120-126
11. Roscoe AW (1993) Developing and Verifying Protocols in CSP. In Proceedings of Mierlo workshop on protocols. TU Eindhoven
12. Roscoe AW (1994) Model-Checking CSP. In A Classical Mind, Essays in Honour of CAR Hoare. Prentice-Hall
13. Roscoe AW, MacCarthy H (submitted for publication) Verifying a Replicated Database: A Case Study in Model-Checking CSP.
14. Schneider S (1996) Security Properties and CSP. In IEEE Computer Society Symposium on Security and Privacy. Oakland
15. Schneier B (1994) Applied Cryptography. Wiley