Finite-state analysis of SSL 3.0

Proceedings of the 7th USENIX Security Symposium

Volumn , Issue , 1998, Pages

  Mitchell, John C ^a   Shmatikov, Vitaly ^a   Stern, Ulrich ^a  

^a Stanford University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

FINITE STATE; HANDSHAKE PROTOCOL; SECURE SOCKETS LAYERS;

FORMAL METHODS;

EID: 85084160482     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (15)

1. Consensus Development Corporation. Secure Sockets Layer discussion list FAQ, http://www.consensus.com/security/ssl-talkfaq.html, September 3, 1997.
2. S. Dietrich. A Formal Analysis of the Secure Sockets Layer Protocol. PhD thesis, Dept. Mathematics and Computer Science, Adelphi University, April 1997.
3. D. L. Dill. The Mur' verification system. In Computer Aided Verification. 8th International Conference, pages 390-3, 1996.
4. D. L. Dill, S. Park, and A. G. Nowatzyk. Formal specification of abstract memory models. In Symposium on Research on Integrated Systems, pages 38-52, 1993.
5. http://www.digicash.com/ecash/ecash-home.html.
6. A. O. Freier, P. Karlton, and P. C. Kocher. The SSL protocol version 3.0. draft-ietf-tls-ssl-version3-00.txt, November 18, 1996.
7. H. Krawczyk, M. Bellare, and R. Canetti. HMAC: Keyed-hashing for message authentication. Internet Request For Comments RFC-2104, February 1997.
8. G. Lowe. Breaking and fixing the Needham-Schroeder public-key protocol using CSP and FDR. In 2nd International Workshop on Tools and Algorithms for the Construction and Analysis of Systems. Springer-Verlag, 1996.
9. J. C. Mitchell, M. Mitchell, and U. Stern. Automated analysis of cryptographic protocols using Mur'. In IEEE Symposium on Security and Privacy, pages 141-51, 1997.
10. http://verify.stanford.edu/dill/murphi.html.
11. S. Schneider. Security properties and CSP. In IEEE Symp. Security and Privacy, 1996.
12. U. Stern and D. L. Dill. Automatic verification of the SCI cache coherence protocol. In Advanced Research Working Conference on Correct Hardware Design and Verification Methods, pages 21-34, 1995.
13. D. Wagner. Email communication, August 23, 1997.
14. D. Wagner and B. Schneier. Analysis of the SSL 3.0 protocol. In 2nd USENIX Workshop on Electronic Commerce, 1996. Revised version of November 19, 1996 available from http://www.cs.berkeley.edu/~daw/ssl3.0.ps.
15. L. Yang, D. Gao, J. Mostoufi, R. Joshi, and P. Loewenstein. System design methodology of UltraSPARC TM-I. In 32nd Design Automation Conference, pages 7-12, 1995.