Introduction Assumptions On Shoup's lemma The proof Conclusion

Introduction Assumptions On Shoup's lemma The proof Conclusion Automatically Verified Mechanized Proof of One-Encryption Key Exchange Bruno Blanchet INRIA, Ecole Normale Superieure, CNRS, Paris January 2012 Bruno Blanchet (INRIA, ENS, CNRS) OEKE in CryptoVerif January 2012 1 / 35

• automatically verified


• property obvious


• encrypted key


• ?? pn


• cryptoverif


• exchange


• evaluation contexts


• ecole normale