Computational semantics for first-order logical analysis of cryptographic protocols

Gergei Bana, Koji Hasebe, Mitsuhiro Okada

Research output: Chapter in Book/Report/Conference proceedingConference contribution

4 Citations (Scopus)


This paper is concerned about relating formal and computational models of cryptography in case of active adversaries when formal security analysis is done with first order logic As opposed to earlier treatments, we introduce a new, fully probabilistic method to assign computational semantics to the syntax. The idea is to make use of the usual mathematical treatment of stochastic processes, hence be able to treat arbitrary probability distributions, non-negligible probability of collision, causal dependence or independence, and so on. We present this via considering a simple example of such a formal model, the Basic Protocol Logic by K. Hasebe and M. Okada [20], but we think the technique is suitable for a wide range of formal methods for protocol correctness proofs. We first review our framework of proof-system, BPL, for proving correctness of authentication protocols, and provide computational semantics. Then we give a full proof of the soundness theorem. We also comment on the differences of our method and that of Computational PCL.

Original languageEnglish
Title of host publicationFormal to Practical Security
Subtitle of host publicationPapers Issued from the 2005-2008 French-Japanese Collaboration
Number of pages24
Publication statusPublished - 2009
Externally publishedYes

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume5458 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


  • Computational semantics
  • Cryptographic protocols
  • First order logic
  • Formal methods

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science(all)


Dive into the research topics of 'Computational semantics for first-order logical analysis of cryptographic protocols'. Together they form a unique fingerprint.

Cite this