Utilizing Simulation-Based Security for the Modular Cryptographic Analysis of Real-World Key Exchange and Secure Channel Protocols

在日常生活中，我们依靠协议在通信伙伴之间安全地交换密钥并建立安全的通信通道，例如SSL/TLS， SSH, IPsec, IEEE802.11i以及许多其他协议。正如人们早就认识到的，以及许多攻击所说明的那样，对这种（现实世界）协议进行严格而全面的加密分析是必不可少的。然而，这种分析仍然提出了一个很大的挑战，分析的复杂性是主要障碍。为了驯服这种复杂性并使分析更易于管理，分析的高度模块化是必要的。因此，该项目的主要目标是开发方法和技术，以尽可能地推动模块化分析。在这方面，一个特别有前途的方法是所谓的基于模拟的方法。虽然可组合性和模块化是这种方法的驱动力，但它在对现实世界的密钥交换和安全通道协议进行严格和全面的模块化分析方面的巨大潜力在很大程度上尚未得到探索。在这个项目中，我们将扩展和完善基于仿真的方法，以便为真实世界的密钥交换和安全通道协议的模块化分析提供一个全面的框架。所开发的框架应应用于选定的真实世界的密钥交换和安全通道协议，以说明和评估所开发的方法和技术。

We depend on protocols for securely exchanging keys betweencommunication partners and establishing securecommunication channels, such as SSL/TLS, SSH, IPsec, IEEE802.11i, and many others, in our everyday life. As haslong been realized and as illustrated by numerous attacks,rigorous and comprehensive cryptographic analysis of such(real-world) protocols is indispensable. However, such ananalysis still poses a big challenge, with the complexityof the analysis being the main obstacle. To tame thiscomplexity and to make the analysis more manageable a highdegree of modularity of the analysis isimperative. The main goal of this project is therefore todevelop methods and techniques in order to push modularanalysis as much as possible. A particularly promisingapproach in this respect is the so-called simulation-basedapproach. While composability and modularity are thedriving forces of this approach, its high potential for therigorous and comprehensive modular analysis of real-worldkey exchange and secure channel protocols is largelyunexplored. In this project, we shall extend and refine thesimulation-based approach in order to provide acomprehensive framework for the modular, yet faithfulanalysis of real-world key exchange and secure channelprotocols. The developed framework shall be applied toselected real-world key exchange and secure channelprotocols in order to illustrate and evaluate the developedmethods and techniques.