On Bisimulations for the Spi Calculus*
The spi calculus is an extension of the pi calculus with cryptographic primitives, designed for the verification of cryptographic protocols. Due to the extension, the naive adaptation of labeled bisimulations for the pi calculus is too strong to be useful for the purpose of verification. Instead, as a viable alternative, several “environment-sensitive” bisimulations have been proposed. In this paper we formally study the differences between these bisimulations.
KeywordsOperational Semantic Label Transition System Cryptographic Protocol Encrypt Message Process Pair
Unable to display preview. Download preview PDF.
- [BDP99]M. Boreale, R. De Nicola and R. Pugliese. Proof Techniques for Cryptographic Processes. In Proceedings of LICS’ 99, pages 157–166. IEEE, Computer Society Press, 1999.Google Scholar
- [BDP02]M. Boreale, R. De Nicola and R. Pugliese. Proof Techniques for Cryptographic Processes. SIAM Journal on Computing, 2002. To appear.Google Scholar
- [BN02]J. Borgström and U. Nestmann. On Bisimulation in the Spi Calculus. Draft full version, available from http://lamp.epfl.ch/~uwe/doc/spi/, 2002.
- [EHHO99]A. S. Elkjær, M. Höhle, H. Hüttel and K. Overgård. Towards Automatic Bisimilarity Checking in the Spi Calculus. In volume 21(3) of Australian Computer Science Communications, pages 175–189. Springer, 1999.Google Scholar
- [FHJ01]U. Frendrup, H. Hüttel and J. N. Jensen. Two Notions of Bisimilarity for Cryptographic Processes. http://www.cs.auc.dk/research/FS/ny/PRpi/ESB/twoNotionsOfESB.ps, 2001.
- [Mil99]R. Milner. Communicating and Mobile Systems: the π-Calculus. Cambridge University Press, 1999.Google Scholar
- [MS92]R. Milner and D. Sangiorgi. Barbed Bisimulation. In Proceedings of ICALP’ 92, volume 623 of LNCS, pages 685–695. Springer, 1992.Google Scholar