Introduction Assumptions On Shoup's lemma The proof Conclusion

Introduction Assumptions On Shoup's lemma The proof Conclusion Automatically Verified Mechanized Proof of One-Encryption Key Exchange Bruno Blanchet INRIA, Ecole Normale Superieure, CNRS, Paris March 2012 Bruno Blanchet (INRIA, ENS, CNRS) OEKE in CryptoVerif March 2012 1 / 23

• automatically verified


• property obvious


• encrypted key


• ?? pn


• cryptoverif


• sku ?


• exchange


• ecole normale