VerifHub

VerifHub allows Verifpal® users to easily share and discuss Verifpal models of cryptographic protocols. The VerifHub service provides unique URIs for each shared model which includes a syntax-highlighted model, an automatically generated diagram and a summary of the analysis results.

Switch to Diagram View

secsync_clients_ephemeral.vp

Submitted on 18 Oct 23 09:39 UTC.

attacker[active]

principal Alice[
	generates alice_session_id
	knows private alice_privatekey
	alice_publickey = G^alice_privatekey
]

principal Bob[
	generates bob_session_id
	knows private bob_privatekey
	bob_publickey = G^bob_privatekey
]

Alice -> Bob: [alice_publickey]

Bob -> Alice: [bob_publickey]

Alice -> Bob: alice_session_id

principal Bob[
	session_hash = HASH(bob_publickey, alice_session_id, bob_session_id)
	session_proof = SIGN(bob_privatekey, session_hash)
]

Bob -> Alice: bob_session_id, session_proof

principal Alice[
	session_hash_2 = HASH(bob_publickey, alice_session_id, bob_session_id)
	sig = SIGNVERIF(bob_publickey, session_hash_2, session_proof)?
]

principal Alice[
	session_hash_3 = HASH(alice_publickey, alice_session_id, bob_session_id)
	session_proof_2 = SIGN(alice_privatekey, session_hash_3)
]

Alice -> Bob: session_proof_2

principal Bob[
	session_hash_4 = HASH(alice_publickey, alice_session_id, bob_session_id)
	sig2 = SIGNVERIF(alice_publickey, session_hash_4, session_proof_2)?
]

queries[
	confidentiality? alice_privatekey
	confidentiality? bob_privatekey
	authentication? Bob -> Alice: session_proof
	authentication? Alice -> Bob: session_proof_2
]

Switch to Model View

Title:secsync_clients_ephemeral.vp Note over Alice: generates alice_session_id\n knows private alice_privatekey\n alice_publickey = G^alice_privatekey\n Note over Bob: generates bob_session_id\n knows private bob_privatekey\n bob_publickey = G^bob_privatekey\n Alice -> Bob: [alice_publickey] Bob -> Alice: [bob_publickey] Alice -> Bob: alice_session_id Note over Bob: session_hash = HASH(bob_publickey, alice_session_id, bob_session_id)\n session_proof = SIGN(bob_privatekey, session_hash)\n Bob -> Alice: bob_session_id, session_proof Note over Alice: session_hash_2 = HASH(bob_publickey, alice_session_id, bob_session_id)\n sig = SIGNVERIF(bob_publickey, session_hash_2, session_proof)?\n Note over Alice: session_hash_3 = HASH(alice_publickey, alice_session_id, bob_session_id)\n session_proof_2 = SIGN(alice_privatekey, session_hash_3)\n Alice -> Bob: session_proof_2 Note over Bob: session_hash_4 = HASH(alice_publickey, alice_session_id, bob_session_id)\n sig2 = SIGNVERIF(alice_publickey, session_hash_4, session_proof_2)?\n

Analysis Results

The model submitter provided the following analysis results:

Query 1 (Confidentiality): PASS
Query 2 (Confidentiality): PASS
Query 3 (Authentication): PASS
Query 4 (Authentication): PASS

Please note that these results are not verified to be accurate. The model submitter may choose to provide false analysis results if they so desire. It is strongly recommended that you re-run the analysis of this model locally if you wish to verify the authenticity of the analysis results above.

Discuss This Model

© Copyright 2019- Nadim Kobeissi. All Rights Reserved. “Verifpal” and the “Verifpal” logo/mascot are registered trademarks of Nadim Kobeissi. Verifpal software is provided as free and open source software, licensed under the GPLv3. Verifpal User Manual, as well as this website, are provided under the CC BY-NC-ND 4.0 license. Published by Symbolic Software.