Sep 2026· International Conference on Automated Software Engineering· Vol 33· 0 citations· 45 references
TL;DR
A layered verification workflow that connects an RFC-level High Spec, implementation-oriented Low Specs, and concrete C implementations of ChaCha20-Poly1305 and proves auxiliary model-consistency lemmas between the RFC-level and implementation-oriented Cryptol models.
This work develops a new methodology for verifying cryptographic software and extends SymCrypt with experimental optimizations and implementations of algorithms such as FrodoKEM, ML-DSA, and HPKE to explore the scalability of writing, adapting, and verifying cryptographic code.
Ho Son, C. Fournet, Jonathan Protzenko et al.· 0 citations
Constructing syntactically correct and cryptographically valid message sequences is essential for protocol state machine learning, conformance testing, and fuzzing. Unlike plaintext protocols, cryptographic protocols involve complex cross-message state dependencies and cryptographic computation constraints. Existing au...
Maosong Chen, Xi Chen, Mengcheng Ju et al.· 0 citations
This work derives the first model of WhatsApp Web's implementation of the Signal protocol and the most detailed model to date of Signal's original protocol, and reveals previously undocumented differences between the original libsignal library and WhatsApp's fork.
Moustafa Said, Aurora Naska, Kevin Morio et al.· 0 citations
Large language models (LLMs) have shown strong potential for assisting software and security analysis tasks, yet their effectiveness in cryptographic symbolic protocol verification remains insufficiently understood. In this paper, we conduct the first systematic evaluation of the capability of state-of-the-art LLMs in...
Tian-Jian Liu, Shi-Cheng Feng, Jin'ao Shang et al.· 0 citations
A detailed description of the steps in the modified EAP-TLS protocol is presented, which addresses issues by directly binding the digital certificate to the subscriber’s SUCI identity to prevent user impersonation, binding the session key to both the certificate and the identity to ensure resistance against Man-in-The-...
Nga Thị Nguyệt Trần, Hung Quoc Nguyen, Giang Thu Bùi· Journal of Science and Techn...· 0 citations
The finalization of NIST post-quantum cryptography (PQC) standards necessitates the immediate migration of security-critical ecosystems to quantum-resistant algorithms. Despite OCaml powering high-assurance security infrastructure such as MirageOS unikernels, the Tezos blockchain, and NetHSM hardware security modules,...
Y. Kotukh, M. Korobchynskyi, Myhailo Rudenko et al.· Automation, Control, and Inf...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
