University of Surrey

Test tubes in the lab Research in the ATI Dance Research

Formal analysis of privacy in Direct Anonymous Attestation schemes

Smyth, B, Ryan, MD and Chen, L (2015) Formal analysis of privacy in Direct Anonymous Attestation schemes Science of Computer Programming, 111 (2). pp. 300-317.

[img]
Preview
Text
Formal analysis of privacy in Direct Anonymous Attestation schemes.pdf - Author's Original
Available under License : See the attached licence file.

Download (390kB) | Preview
[img]
Preview
Text (licence)
SRI_deposit_agreement.pdf
Available under License : See the attached licence file.

Download (33kB) | Preview

Abstract

This article introduces a definition of privacy for Direct Anonymous Attestation schemes. The definition is expressed as an equivalence property which is suited to automated reasoning using Blanchet's ProVerif. The practicality of the definition is demonstrated by analysing the RSA-based Direct Anonymous Attestation protocol by Brickell, Camenisch & Chen. The analysis discovers a vulnerability in the RSA-based scheme which can be exploited by a passive adversary and, under weaker assumptions, corrupt issuers and verifiers. A security fix is identified and the revised protocol is shown to satisfy our definition of privacy.

Item Type: Article
Subjects : Computing
Divisions : Faculty of Engineering and Physical Sciences > Computing Science
Authors :
NameEmailORCID
Smyth, BUNSPECIFIEDUNSPECIFIED
Ryan, MDUNSPECIFIEDUNSPECIFIED
Chen, LUNSPECIFIEDUNSPECIFIED
Date : 1 November 2015
Identification Number : 10.1016/j.scico.2015.04.004
Copyright Disclaimer : © 2015 Elsevier B.V. All rights reserved.
Uncontrolled Keywords : Accountability, Applied pi calculus, Direct Anonymous Attestation, Privacy, Trusted computing
Depositing User : Symplectic Elements
Date Deposited : 24 Apr 2017 10:23
Last Modified : 31 Oct 2017 19:18
URI: http://epubs.surrey.ac.uk/id/eprint/814007

Actions (login required)

View Item View Item

Downloads

Downloads per month over past year


Information about this web site

© The University of Surrey, Guildford, Surrey, GU2 7XH, United Kingdom.
+44 (0)1483 300800