I recently realized that there are methods for evaluating the security of cryptographic protocols such as BAN Logic. The BAN logic is a “Logic of Authentication” proposed by Burrows, Abadi, and Needham that provides a set of logical formulae to model the basic actions of protocol participants and the meanings of the basic protocol components. It focuses on the beliefs of trustworthy parties involved in authentication protocols and on the evolution of these beliefs as a consequence of communication. I saw in the "Cryptographic Protocols", by Ling Dong and Kefei Chen, that there exist some tools which are able to evaluate the security of protocols such as visual BMF analyzer. Now I'm looking for such user-friendly tools. I could not find any information about such programs. Can someone guide me to download such tools?
I will be so thankful for any helpful comments and answers.
I think the evaluation of security depend it on some points,
the first evaluate confusion , and diffusion properties of the operation of the cipher system.
the second evaluation performance analysis of the system for the integrity, non-repudiation, access control and authentication.
the third evaluation by attack analysis.
the forth evaluation for implementation of the system in the machine.
the fifth evaluation for the cost of the system.
its very important to build the evaluation software system.
Evaluate the security based on different parameters like encryption and decryption time, throughput, Run time test, Avalanche effect, Memory, Entropy and correlation assessment.
I advice you follow the AES process to evaluate the security parameter and based on his instruction develop a program to test your cryptographic protocol.
You can try AVISPA. It is an automated verification tool with a simple interface.
you can evaluate the level of confusion and diffusion induced by your system
- Badges
- Science topic