https://github.com/mitre/oldcpsa
Cryptographic Protocol Shapes Analyzer
https://github.com/mitre/oldcpsa
Last synced: 2 months ago
JSON representation
Cryptographic Protocol Shapes Analyzer
- Host: GitHub
- URL: https://github.com/mitre/oldcpsa
- Owner: mitre
- License: other
- Created: 2017-07-11T18:12:14.000Z (almost 8 years ago)
- Default Branch: master
- Last Pushed: 2022-10-04T14:42:07.000Z (over 2 years ago)
- Last Synced: 2025-01-05T09:43:35.759Z (4 months ago)
- Language: Scilab
- Size: 21.4 MB
- Stars: 36
- Watchers: 9
- Forks: 5
- Open Issues: 0
-
Metadata Files:
- Readme: README.txt
- Changelog: ChangeLog
- License: license.txt
Awesome Lists containing this project
README
CPSA: Crptographic Protocol Shapes Analyzer Version 3
The Cryptographic Protocol Shapes Analyzer (CPSA), is a software tool
designed to assist in the design and analysis of cryptographic
protocols. A cryptographic protocol is a specific pattern of
interaction between principals. TLS and IKE are some examples of
well-known cryptographic protocols.
CPSA attempts to enumerate all essentially different executions
possible for a cryptographic protocol. We call them the shapes of the
protocol. Many naturally occurring protocols have only finitely many,
indeed very few shapes. Authentication and secrecy properties are
easy to determine from them, as are attacks and anomalies, and an
auxiliary tool reads off strongest authentication and secrecy goals
from the shapes.
For each input problem, the CPSA program is given some initial
behavior, and it discovers what shapes are compatible with it.
Normally, the initial behavior is from the point of view of one
participant. The analysis reveals what the other participants must
have done, given the participant's view.
CPSA version 3 features support for Diffie-Hellman and state. The
manual in provides a comprehensive description of
the program.
CPSA: Cryptographic Protocol Shapes Analyzer
This program has been built and tested using Haskell Platform.
It is available from or from an operating
system specific source. The name of the Linux package is usually
haskell-platform.
If the Internet is available, install CPSA with:
$ cabal update
$ cabal install cpsa
Find the documentation directory by typing "cpsa -h" in a command
shell, and view index.html in a browser.
INSTALLING FROM A TARBALL
Build and install with:
$ cabal build
$ cabal install --overwrite-policy=always
: To find the directory containing documentation and samples, type:
$ cpsa4 -h
QUICK START (Linux)
: To analyze a protocol you have put in prob.scm type:
$ cpsa -o prob.txt prob.scm
$ cpsagraph -o prob.xhtml prob.txt
$ firefox -remote "openFile(`pwd`/prob.xhtml)"
QUICK START (Mac)
: To analyze a protocol you have put in prob.scm type:
$ cpsa -o prob.txt prob.scm
$ cpsagraph -o prob.xhtml prob.txt
$ open prob.xhtml
QUICK START (Windows)
With Cygwin or MinGW, the installation is similar to the Linux
install. The software has been tested on a Windows system on which
neither MinGW or Cygwin has been installed. Install Haskell Platform
Core and then run:
C:\...> cabal update
C:\...> cabal install parallel
C:\...> cabal build
C:\...> cabal install --overwrite-policy=always
Documentation and samples are in the directory given by
C:\...> cpsa -h
The installed programs can be run from the command prompt or via a
batch file. Alternatively, copy doc/Make.hs into the directory
containing your CPSA problem statements, and load it into a Haskell
interpreter. Read the source for usage instructions.
MAKEFILE
To start your own project, create a fresh directory and then type:
$ cpsainit
This will create a Makefile that automates the analysis process. For
Windows, it will also create Make4.hs, a cpsa build script written in
Haskell.
PARALLELISM
CPSA is built so it can make use of multiple processors. To make use
of more than one processor, start CPSA with the -N runtime flag, as in
"+RTS -N -RTS". The GHC documentation describes the -N option in
detail.
TEST SUITE
Cabal currently fails to preserve permissions correctly. To fix this
problem, type:
$ /bin/sh fixperms
: To run the test suite type:
$ ./cpsatst
Tests with the .scm extension and .prot extension are expected to
complete without error, tests with the .lsp extension are expected to
fail, and tests with the .lisp extension are not run. New users
should read tst/README, and then browse the files it suggests while
reading CPSA documentation.
Don't develop your protocols in the tst directory. The script is
optimized for testing the cpsa program, not analyzing protocols.
ADDITIONAL PROGRAMS
The src directory of the source distributions includes programs
written in Scheme, Prolog, Elisp, and OCaml for performing tasks. Use
them as templates for your special purpose CPSA analysis and
transformation needs. Also, when given the --json option, the CPSA
pretty printer cpsapp will transform CPSA S-expressions into
JavaScript Object Notation (JSON).
On Linux, the GHC runtime can request so much memory that thrashing
results. The script in src/ghcmemlimit sets an environment variable
that limits memory to the amount of free and reclaimable memory on
your machine.
KNOWN BUGS
Variable separation in generalization fails to separate variables in
terms of the form (ltk a a).