Extracting the Reference Test Suites from Cryptographic Protocol Specifications Written on a Domain-Specific Language
https://doi.org/10.15514/ISPRAS-2023-35(6)-10
Abstract
The paper describes a tool for testing the security of cryptographic protocol implementations working on the basis of specifications written in a declarative interoperable domain-specific language implemented as EDSL (Embedded [in Haskell] DSL). The problem of forming high-quality reference test suites for testing the security of cryptoprotocol implementations is considered. A method of addressing this problem within the tool being developed is discussed.
Supporting agencies: The work is supported by a grant from the Ministry of Education and Science of Russia.
About the Author
Sergey Evgenevich PROKOPEV
Institute for System Programming of the Russian Academy of Sciences,
JSC “NPK Kryptonite”
Russian Federation
Russian Federation
Research associate in the Department of Programming Technologies of the ISP RAS, senior researcher in the area of security protocols in the Laboratory of the Network Security of JSC NPK “Kryptonite”.
References
1. H. Kario. Tlsfuzzer. Available at: https://github.com/tomato42/tlsfuzzer, accessed 10.11.2023.
2. M. Ammann, L. Hirschi, S. Kremer. DY Fuzzing: Formal Dolev-Yao Models Meet Cryptographic Protocol Fuzz Testing. https://eprint.iacr.org/2023/057.
3. Пакулин Н.В., Шнитман В.З., Никешин А.В. Разработка тестового набора для верификации реализаций протокола безопасности TLS // Труды Института системного программирования РАН, том 23, 2012 г., стр. 387-404.
4. Kenneth L. McMillan and Lenore D. Zuck. 2019. Formal specification and testing of QUIC. In Proceedings of ACM Special Interest Group on Data Communication (SIGCOMM’19). ACM, New York, NY, USA, 14 pages.
5. ABZ – International Conference on Rigorous State Based Methods, Available at: https://abz-conf.org, accessed 10.11.2023.
6. Прокопьев С.Е. Формальный язык первичных спецификаций криптографических протоколов. Труды ИСП РАН. 2021;33(5):117-136. https://doi.org/10.15514/ISPRAS-2021-33(5)-7.
7. Prokopev, S. Cryptographic protocol conformance testing based on domain-specific state machine. J Comput Virol Hack Tech (2023). https://doi.org/10.1007/s11416-023-00474-1.
Review
For citations:
PROKOPEV S.E. Extracting the Reference Test Suites from Cryptographic Protocol Specifications Written on a Domain-Specific Language. Proceedings of the Institute for System Programming of the RAS (Proceedings of ISP RAS). 2023;35(6):167-178. (In Russ.) https://doi.org/10.15514/ISPRAS-2023-35(6)-10
Email this article 