Title: The layered games framework for specifications and analysis of security protocols

Authors: Amir Herzberg, Igal Yoffe

Addresses: Computer Science Department, Bar Ilan University, Ramat Gan 52900, Israel. ' Computer Science Department, Bar Ilan University, Ramat Gan 52900, Israel

Abstract: We establish rigorous foundations to the use of modular and layered design for building complex distributed systems, resilient to failures and attacks. Layering is a key to the design of the internet and other distributed systems. Hence, solid, theoretical foundations are essential, especially when considering adversarial settings. A protocol realises a layer (over some lower layer) if it |wins| with high probability, a specified game, when running over any implementation of the lower layer. This is in contrast to existing frameworks allowing modular design of cryptographic protocols, where protocols must emulate an ideal functionality. Ideal functionalities are a very elegant method for specifications, but we argue that often, game-based specifications are more appropriate, to avoid over-specification (|forcing| a particular design) and under specification (e.g. protocols that work poorly for realistic adversaries). Our results allow specification and analysis of each layer independently, then combining the results to ensure properties of the complete system.

Keywords: applied cryptography; composability; foundations; layered specifications; secure e-commerce layers; layered games framework; electronic commerce; distributed systems; failures; attacks; security.

DOI: 10.1504/IJACT.2008.021087

International Journal of Applied Cryptography, 2008 Vol.1 No.2, pp.144 - 159

Published online: 03 Nov 2008 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article