Selected publications at LSV

DKRS10
S. Delaune, S. Kremer, M. D. Ryan and G. SteelA Formal Analysis of Authentication in the TPMIn Revised Selected Papers of the 7th International Workshop on Formal Aspects in Security and Trust (FAST'10), Pisa, Italy, September 2010, LNCS 6561, pages 111-125. Springer. ( PDF | PS | PS.GZ )
Abstract:
The Trusted Platform Module (TPM) is a hardware chip designed to enable computers to achieve a greater level of security than is possible in software alone. To this end, the TPM provides a way to store cryptographic keys and other sensitive data in its shielded memory. Through its API, one can use those keys to achieve some security goals. The TPM is a complex security component, whose specification consists of more than 700 pages.
    We model a collection of four TPM commands, and we identify and formalise their security properties. Using the tool ProVerif, we rediscover some known attacks and some new variations on them. We propose modifications to the API and verify our properties for the modified API.

@inproceedings{DKRS-fast10,
   address = {Pisa, Italy},
   author = {Delaune, St{\'e}phanie and Kremer, Steve and Ryan, Mark D. and Steel, Graham},
   booktitle = {{R}evised {S}elected {P}apers of the 7th {I}nternational {W}orkshop on {F}ormal {A}spects in {S}ecurity and {T}rust ({FAST}'10)},
   DOI = {10.1007/978-3-642-19751-2_8},
   editor = {Degano, Pierpaolo and Etalle, Sandro and Guttman, Joshua},
   month = sep,
   pages = {111-125},
   publisher = {Springer},
   series = {Lecture Notes in Computer Science},
   title = {A~Formal Analysis of Authentication in the {TPM}},
   url = {http://www.lsv.ens-cachan.fr/Publis/PAPERS/PDF/DKRS-fast10.pdf},
   volume = {6561},
   year = {2010},
}

About LSV