VerifHub

VerifHub allows Verifpal® users to easily share and discuss Verifpal models of cryptographic protocols. The VerifHub service provides unique URIs for each shared model which includes a syntax-highlighted model, an automatically generated diagram and a summary of the analysis results.

Switch to Diagram View

protonmail.vp

Submitted on 28 Jun 20 21:26 UTC.

attacker[active]

principal Alice[
]

principal Protonmail[
]

principal Microsoft[
]

principal Bob[
]

principal Alice[
	knows private psk
	generates a
	generates m1
	ga = G^a
	em1 = AEAD_ENC(psk, m1, nil)
]

Alice -> Protonmail: ga, em1

Protonmail -> Microsoft: ga, em1

Microsoft -> Bob: ga, em1

principal Bob[
	knows private psk
	generates m2
	generates b
	gb = G^b
	gab = ga^b
	m1b = AEAD_DEC(psk, em1, nil)?
	em2 = AEAD_ENC(gab, m2, nil)
]

Bob -> Protonmail: em2, gb

Protonmail -> Alice: em2, gb

principal Alice[
	gba = gb^a
	m2a = AEAD_DEC(gba, em2, nil)?
]

queries[
	confidentiality? m1
	confidentiality? m2
]

Switch to Model View

Title:protonmail.vp Note over Alice: Note over Protonmail: Note over Microsoft: Note over Bob: Note over Alice: knows private psk\n generates a\n generates m1\n ga = G^a\n em1 = AEAD_ENC(psk, m1, nil)\n Alice -> Protonmail: ga, em1 Protonmail -> Microsoft: ga, em1 Microsoft -> Bob: ga, em1 Note over Bob: knows private psk\n generates m2\n generates b\n gb = G^b\n gab = ga^b\n m1b = AEAD_DEC(psk, em1, nil)?\n em2 = AEAD_ENC(gab, m2, nil)\n Bob -> Protonmail: em2, gb Protonmail -> Alice: em2, gb Note over Alice: gba = gb^a\n m2a = AEAD_DEC(gba, em2, nil)?\n

Analysis Results

The model submitter provided the following analysis results:

Query 1 (Confidentiality): PASS
Query 2 (Confidentiality): PASS

Please note that these results are not verified to be accurate. The model submitter may choose to provide false analysis results if they so desire. It is strongly recommended that you re-run the analysis of this model locally if you wish to verify the authenticity of the analysis results above.

Discuss This Model

© Copyright 2019- Nadim Kobeissi. All Rights Reserved. “Verifpal” and the “Verifpal” logo/mascot are registered trademarks of Nadim Kobeissi. Verifpal software is provided as free and open source software, licensed under the GPLv3. Verifpal User Manual, as well as this website, are provided under the CC BY-NC-ND 4.0 license. Published by Symbolic Software.