I decided to learn more about the application of formal methods to cryptographic

Question

I decided to learn more about the application of formal methods to cryptographic protocols and found this interesting talk by Cathy Meadows at YouTube.

After doing research about how people are using formal methods, it seems to me that they're not being used for design. In other words, formal methods are being applied by researchers to cryptographic protocols that were already designed and published by organizations.

Why are those organizations not applying those same formal methods while they're designing the protocol? Why don

Explanation / Answer

In my experience the persons doing the standardization may not know about formal methods in the first place. And even if a formal method was used, they would not know how to assess it.

Note that whatever mathematical method is applied, the security of a protocol is still dependent on how the domain was modelled. If the model is even slightly incorrect, a protocol may still be insecure. It would not be the first time - to put it mildly - that a security proof has to be reconsidered.

Related Questions

Navigate

• Browse (All)
• Browse I
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.