From: Andreas Lochbihler <firstname.lastname@example.org>
I'm happy to announce a new entry, Logging-independent Message Anonymity in the Relational
Method, by Pasquale Noce:
In the context of formal cryptographic protocol verification, logging-independent message
anonymity is the property for a given message to remain anonymous despite the attacker's
capability of mapping messages of that sort to agents based on some intrinsic feature of
such messages, rather than by logging the messages exchanged by legitimate agents as with
logging-dependent message anonymity.
This paper illustrates how logging-independent message anonymity can be formalized
according to the relational method for formal protocol verification by considering a
real-world protocol, namely the Restricted Identification one by the BSI. This sample
model is used to verify that the pseudonymous identifiers output by user identification
tokens remain anonymous under the expected conditions.
You'll find it at https://www.isa-afp.org/entries/Logging_Independent_Anonymity.html
The modelling of the security protocol is exceptionally well-documented!
Last updated: Dec 05 2021 at 23:19 UTC