一句话:证明通用可组合性(UC)与鲁棒编译(RC)之间的形式联系,并用 DEEPSEC 机械化 UC 协议证明。
本文研究密码学中的通用可组合性(UC)与程序语言安全中的鲁棒编译(RC)之间的关系。作者指出二者虽通常被孤立研究,但存在深层联系。文章形式化证明(在完美 UC 而非计算 UC 下)UC 可归约为 RC,并给出编程语言需满足的条件以实现类 UC 组合。作为推论,作者通过相应编译器满足 RC,证明一个已有和一个新的承诺协议具有 UC 性。最后在 DEEPSEC 中机械化这些证明,获得协议确实满足 UC 的符号化保证,展示了可扩展的 UC 机械化验证路径。
This article discusses the relationship between two frameworks: universal composability ( \(\mathsf{UC}\) ) and robust compilation ( RC ). In cryptography, \(\mathsf{UC}\) is a framework for the specification and analysis of cryptographic protocols with a strong compositionality guarantee: \(\mathsf{UC}\) protocols remain secure even when composed with other protocols. In programming language security, RC is a novel framework for determining secure compilation by proving whether compiled programs are as secure as their source-level counterparts no matter what target-level code they interact with. Presently, these disciplines are studied in isolation, though we argue that there is a deep connection between them and exploring this connection will benefit both research fields. This article formally proves the connection between \(\mathsf{UC}\) and RC and then it explores the benefits of this connection (focussing on perfect, rather than computational \(\mathsf{UC}\) ). For this, this article first identifies which conditions must programming languages fulfil in order to possibly attain \(\mathsf{UC}\) -like composition. Then, it proves \(\mathsf{UC}\) of both an existing and a new commitment protocol as a corollary of the related compilers attaining RC . Finally, it mechanises these proofs in DEEPSEC, obtaining symbolic guarantees that the protocol is indeed \(\mathsf{UC}\) . Our connection lays the groundwork towards a better and deeper understanding of both \(\mathsf{UC}\) and RC , and the benefits we showcase from this connection provide evidence of scalable mechanised proofs for \(\mathsf{UC}\) .
@article{paperbot2666,
title = {Universal Composability Is Robust Compilation},
author = {Marco Patrignani and Robert Künnemann and Riad S. Wahby and Ethan Cecchetti},
journal = {ACM Transactions on Programming Languages and Systems},
volume = {46},
number = {4},
year = {2024},
doi = {10.1145/3698234}
}