VerifHub

VerifHub allows Verifpal® users to easily share and discuss Verifpal models of cryptographic protocols. The VerifHub service provides unique URIs for each shared model which includes a syntax-highlighted model, an automatically generated diagram and a summary of the analysis results.

Switch to Diagram View

monokex-x.vp

Submitted on 29 Jun 20 11:44 UTC.

attacker[active]

principal Initiator[
	knows public zero
	knows public one
	knows public h0
	knows private ispriv
	generates iepriv
	ispub = G^ispriv
	iepub = G^iepriv
]

principal Responder[
	knows public zero
	knows public one
	knows public h0
	knows private rspriv
	rspub = G^rspriv
]

Responder -> Initiator: rspub

principal Initiator[
	knows private p1
	ies = rspub^iepriv
	iss = rspub^ispriv
	ih1 = HASH(h0, rspub)
	ih2 = HASH(ih1, ih1)
	ih3 = HASH(ih2, iepub)
	ih4 = HASH(ih3, ies)
	ih5 = HASH(ih4, zero)
	ik1 = HASH(ih4, one)
	e1 = ENC(ik1, ispub)
	ih6 = HASH(ih5, e1)
	ih7 = HASH(ih6, zero)
	it1 = HASH(ih6, one)
	ih8 = HASH(ih7, iss)
	ih9 = HASH(ih8, zero)
	k2 = HASH(ih8, one)
	e2 = ENC(k2, p1)
	ih10 = HASH(ih9, e2)
	ih11 = HASH(ih10, zero)
	it2 = HASH(ih10, one)
]

Initiator -> Responder: iepub, e1, e2, it1, it2

queries[
	confidentiality? ispub
	confidentiality? p1
	unlinkability? e1, e2
	freshness? e1
	freshness? e2
]

Switch to Model View

Title:monokex-x.vp Note over Initiator: knows public zero\n knows public one\n knows public h0\n knows private ispriv\n generates iepriv\n ispub = G^ispriv\n iepub = G^iepriv\n Note over Responder: knows public zero\n knows public one\n knows public h0\n knows private rspriv\n rspub = G^rspriv\n Responder -> Initiator: rspub Note over Initiator: knows private p1\n ies = rspub^iepriv\n iss = rspub^ispriv\n ih1 = HASH(h0, rspub)\n ih2 = HASH(ih1, ih1)\n ih3 = HASH(ih2, iepub)\n ih4 = HASH(ih3, ies)\n ih5 = HASH(ih4, zero)\n ik1 = HASH(ih4, one)\n e1 = ENC(ik1, ispub)\n ih6 = HASH(ih5, e1)\n ih7 = HASH(ih6, zero)\n it1 = HASH(ih6, one)\n ih8 = HASH(ih7, iss)\n ih9 = HASH(ih8, zero)\n k2 = HASH(ih8, one)\n e2 = ENC(k2, p1)\n ih10 = HASH(ih9, e2)\n ih11 = HASH(ih10, zero)\n it2 = HASH(ih10, one)\n Initiator -> Responder: iepub, e1, e2, it1, it2

Analysis Results

The model submitter provided the following analysis results:

Query 1 (Confidentiality): FAIL
Query 2 (Confidentiality): FAIL
Query 3 (Unlinkability): PASS
Query 4 (Freshness): PASS
Query 5 (Freshness): PASS

Please note that these results are not verified to be accurate. The model submitter may choose to provide false analysis results if they so desire. It is strongly recommended that you re-run the analysis of this model locally if you wish to verify the authenticity of the analysis results above.

Discuss This Model

© Copyright 2019- Nadim Kobeissi. All Rights Reserved. “Verifpal” and the “Verifpal” logo/mascot are registered trademarks of Nadim Kobeissi. Verifpal software is provided as free and open source software, licensed under the GPLv3. Verifpal User Manual, as well as this website, are provided under the CC BY-NC-ND 4.0 license. Published by Symbolic Software.