FDR2 is a refinement checker for
establishing properties of models expressed in CSP. Casper is a program
that will take a description of a security protocol in a simple,
abstract language, and produce a CSP description of the same protocol,
suitable for checking using FDR2. It can be used either to find attacks
upon protocols, or to show that no such attack exists, subject to the
assumptions of the Dolev-Yao Model (i.e. that the intruder may overhear
or intercept messages, decrypt and encrypt messages with keys that he
knows, and fake messages, but not perform any cryptological attacks).
|