{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T17:39:18Z","timestamp":1772041158157,"version":"3.50.1"},"reference-count":62,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/sp46214.2022.9833800","type":"proceedings-article","created":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T19:28:05Z","timestamp":1658950085000},"page":"125-141","source":"Crossref","is-referenced-by-count":15,"title":["A Logic and an Interactive Prover for the Computational Post-Quantum Security of Protocols"],"prefix":"10.1109","author":[{"given":"Cas","family":"Cremers","sequence":"first","affiliation":[{"name":"CISPA Helmholtz Center for Information Security,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Caroline","family":"Fontaine","sequence":"additional","affiliation":[{"name":"Université Paris-Saclay, CNRS, ENS Paris-Saclay, Laboratoire Méthodes Formelles,Gif-sur-Yvette,France,91190"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Charlie","family":"Jacomme","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.26"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/2837614.2837655"},{"key":"ref12","first-page":"409","article-title":"Quantum circuits for the CSIDH: optimizing quantum evaluation of isogenies","author":"bernstein","year":"2019","journal-title":"Annual International Conference on the Theory and Applications of Cryptographic Techniques"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11659-4_15"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2007.1005"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3290346"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-05378-9_9"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29011-4_10"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2016.27"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/11958239_14"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0055718"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423350"},{"key":"ref10","article-title":"Card brand mixup attack: Bypassing the PIN in non-Visa cards by using them for Visa transactions","author":"basin","year":"2021","journal-title":"30th USENIX Security Symposium (USENIX Security 21)"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423350"},{"key":"ref17","doi-asserted-by":"crossref","first-page":"493","DOI":"10.1007\/978-3-030-45724-2_17","article-title":"Quantum security analysis of CSIDH","author":"bonnetain","year":"2020","journal-title":"Advances in Cryptology—EUROCRYPT 2020"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1561\/3300000004"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2010.13"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1504\/IJACT.2009.023466"},{"key":"ref51","doi-asserted-by":"crossref","first-page":"463","DOI":"10.1007\/978-3-030-45724-2_16","article-title":"He gives C-sieves on the CSIDH","author":"peikert","year":"2020","journal-title":"Advances in Cryptology - EUROCRYPT 2020"},{"key":"ref50","first-page":"268","article-title":"On the equivalence of several security notions of key encapsulation mechanism","author":"nagao","year":"2006","journal-title":"IACR Cryptol ePrint Arch"},{"key":"ref46","author":"koutsos","year":"2019","journal-title":"Preuves symboliques de propriétés d’indistinguabilité calculatoire"},{"key":"ref45","doi-asserted-by":"crossref","first-page":"464","DOI":"10.1109\/EuroSP.2019.00041","article-title":"The 5G-AKA Authentication Protocol Privacy","author":"koutsos","year":"2019","journal-title":"2019 IEEE European Symposium on Security and Privacy (EuroS&P)"},{"key":"ref48","doi-asserted-by":"crossref","first-page":"696","DOI":"10.1007\/978-3-642-39799-8_48","article-title":"The TAMARIN Prover for the Symbolic Analysis of Security Protocols","author":"meier","year":"2013","journal-title":"Computer Aided Verification Lecture Notes in Computer Science"},{"key":"ref47","first-page":"231","article-title":"A Mechanised Cryptographic Proof of the WireGuard Virtual Private Network Protocol","author":"lipp","year":"2019","journal-title":"2019 IEEE Symposium on Security and Privacy"},{"key":"ref42","first-page":"58","article-title":"An efficient authenticated key exchange from random self-reducibility on CSIDH","author":"kawashima","year":"2020","journal-title":"International Conference on Information Security and Cryptology"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7296"},{"key":"ref44","doi-asserted-by":"crossref","first-page":"356","DOI":"10.1109\/EuroSP.2019.00034","article-title":"Noise Explorer: Fully automated modeling and verification for arbitrary Noise protocols","author":"kobeissi","year":"2019","journal-title":"IEEE European Symposium on Security and Privacy (EuroS&P)"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.38"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030112"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484567"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660276"},{"key":"ref9","first-page":"146","article-title":"EasyCrypt: A Tutorial","author":"barthe","year":"2014","journal-title":"Foundations of Security Analysis and Design VII - FOSAD Tutorial Lectures ser Lecture Notes in Computer Science"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/FOCS.2014.57"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354228"},{"key":"ref6","first-page":"350","article-title":"Formal Analysis of Vote Privacy Using Computationally Complete Symbolic Attacker","author":"bana","year":"2018","journal-title":"Computer Security - 23rd European Symposium on Research in Computer Security ESORICS 2018 Barcelona Spain September 3–7 2018 Proceedings Part II"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00078"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/1609956.1609963"},{"key":"ref35","article-title":"Strongly Secure Authenticated Key Exchange from Factoring, Codes, and Lattices","author":"fujioka","year":"2012","journal-title":"Technical Report 211"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8784"},{"key":"ref37","article-title":"Anonymous, Robust Post-Quantum Public Key Encryption","author":"grubbs","year":"2021"},{"key":"ref36","article-title":"Quantum Security of Cryptographic Primitives","author":"gagliardoni","year":"2017","journal-title":"arXiv 1705 02417 [quant-ph]"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1983.1056650"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00039"},{"key":"ref33","first-page":"357","article-title":"Strong authentication for RFID systems using the AES algorithm","author":"feldhofer","year":"2004","journal-title":"CHES volume 3156 of Lecture Notes in Computer Science"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2018.i1.238-268"},{"key":"ref2","article-title":"The Squirrel Prover repository","year":"0"},{"key":"ref1","article-title":"Long version of this paper","year":"0"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-171070"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-75248-4_15"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2017.9"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417229"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134063"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.28"},{"key":"ref20","article-title":"The Internet Key Exchange (IKE)","author":"carrel","year":"1998","journal-title":"RFC 2409"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-020-09360-1"},{"key":"ref21","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1007\/978-3-030-03332-3_15","article-title":"CSIDH: An efficient post-quantum commutative group action","author":"castryck","year":"2018","journal-title":"Advances in Cryptology – ASIACRYPT 2018"},{"key":"ref28","volume":"22","author":"dalla chiara","year":"2013","journal-title":"Reasoning in Quantum Theory Sharp and Unsharp Quantum Logics"},{"key":"ref27","first-page":"1","article-title":"A formal analysis of IEEE 802.11’s WPA2: Countering the kracks caused by cracking the counters","author":"cremers","year":"2020","journal-title":"29th USENIX Security Symposium (USENIX Security 20)"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.58"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1137\/060670997"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3450745"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1038\/299802a0"}],"event":{"name":"2022 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2022,5,22]]},"end":{"date-parts":[[2022,5,26]]}},"container-title":["2022 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9833550\/9833558\/09833800.pdf?arnumber=9833800","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,30]],"date-time":"2024-09-30T00:48:16Z","timestamp":1727657296000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833800\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":62,"URL":"https:\/\/doi.org\/10.1109\/sp46214.2022.9833800","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}