VerifHub allows Verifpal® users to easily share and discuss Verifpal models of cryptographic protocols. The VerifHub service provides unique URIs for each shared model which includes a syntax-highlighted model, an automatically generated diagram and a summary of the analysis results.

Switch to Diagram View


Submitted on 06 Mar 23 16:47 UTC. attacker[active] principal Alice[ knows private enc_key knows public document_id knows private alice_privatekey alice_publickey = G^alice_privatekey ] principal Bob[ knows private enc_key knows public document_id knows private bob_privatekey ] Alice -> Bob: [alice_publickey] principal Alice[ knows private msg generates snapshot_or_update_id additonal_data = CONCAT(alice_publickey, snapshot_or_update_id) ciphertext = AEAD_ENC(enc_key, msg, additonal_data) sig = SIGN(alice_privatekey, HASH(ciphertext, additonal_data)) ] Alice -> Bob: ciphertext, sig, additonal_data principal Bob[ sig_valid = SIGNVERIF(alice_publickey, HASH(ciphertext, additonal_data), sig)? ciphertext_dec = AEAD_DEC(enc_key, ciphertext, additonal_data)? alice_publickey_1b, snapshot_or_update_id_b = SPLIT(additonal_data) _ = ASSERT(alice_publickey, alice_publickey_1b)? ] queries[ confidentiality? msg authentication? Alice -> Bob: ciphertext authentication? Alice -> Bob: additonal_data freshness? ciphertext freshness? additonal_data freshness? sig ]
Switch to Model View
Title:naisho_message.vp Note over Alice: knows private enc_key\n knows public document_id\n knows private alice_privatekey\n alice_publickey = G^alice_privatekey\n Note over Bob: knows private enc_key\n knows public document_id\n knows private bob_privatekey\n Alice -> Bob: [alice_publickey] Note over Alice: knows private msg\n generates snapshot_or_update_id\n additonal_data = CONCAT(alice_publickey, snapshot_or_update_id)\n ciphertext = AEAD_ENC(enc_key, msg, additonal_data)\n sig = SIGN(alice_privatekey, HASH(ciphertext, additonal_data))\n Alice -> Bob: ciphertext, sig, additonal_data Note over Bob: sig_valid = SIGNVERIF(alice_publickey, HASH(ciphertext, additonal_data), sig)?\n ciphertext_dec = AEAD_DEC(enc_key, ciphertext, additonal_data)?\n alice_publickey_1b, snapshot_or_update_id_b = SPLIT(additonal_data)\n _ = ASSERT(alice_publickey, alice_publickey_1b)?\n

Analysis Results

The model submitter provided the following analysis results:

Please note that these results are not verified to be accurate. The model submitter may choose to provide false analysis results if they so desire. It is strongly recommended that you re-run the analysis of this model locally if you wish to verify the authenticity of the analysis results above.

Discuss This Model

© Copyright 2019- Nadim Kobeissi. All Rights Reserved. “Verifpal” and the “Verifpal” logo/mascot are registered trademarks of Nadim Kobeissi. Verifpal software is provided as free and open source software, licensed under the GPLv3. Verifpal User Manual, as well as this website, are provided under the CC BY-NC-ND 4.0 license. Published by Symbolic Software.