Verified Cryptographic Implementations for TLS

Karthikeyan Bhargavan (1, 2) , Ricardo Corin (2) , Cédric Fournet (2) , Eugen Zalinescu (3)

1 PROSECCO - Programming securely with cryptography
2 Microsoft - Microsoft Research [Cambridge]
3 MSR - INRIA - Microsoft Research - Inria Joint Centre

We intend to narrow the gap between concrete implementations of cryptographic protocols and their verified models. We develop and verify a small functional implementation of the Transport Layer Security protocol (TLS 1.0). We make use of the same executable code for interoperability testing against mainstream implementations, for automated symbolic cryptographic verification, and for automated computational cryptographic verification. We rely on a combination of recent tools, and we also develop a new tool for extracting computational models from executable code. We obtain strong security guarantees for TLS as used in typical deployments.

Domaines: Cryptographie et sécurité [cs.CR]

Karthikeyan Bhargavan, Ricardo Corin, Cédric Fournet, Eugen Zalinescu. Verified Cryptographic Implementations for TLS. ACM Transactions on Information and System Security, 2012, 15 (1), pp.3:1--3:32. ⟨10.1145/2133375.2133378⟩. ⟨hal-00863381⟩