Cryptographic protocols constitute the cornerstone of secure communication in open distributed systems. The systematic formal verification of such protocols gained prominence following Gavin Lowe’s 1995 discovery of a structural flaw in the classical Needham-Schroeder Public Key protocol from 1978. This paper presents a novel formal analysis of such protocol through Computability Logic (CoL), a game-theoretic semantics and reasoning system that models interaction between an honest agent and a hostile environment. By formalising the protocol’s execution as a game specified in the CoL fragment CL4, we demonstrate that the original vulnerability allows the environment to employ a successful Copycat Strategy isomorphic to the standard Man-in-the-Middle attack (MitM). Conversely, we prove that the revised protocol including Lowe’s fix effectively breaks this adversarial advantage, guaranteeing security against the MitM. We propose this case study as a promising starting point for the development of a new methodology in protocol verification

Cutting out the middle man: a game-theoretic analysis in computability logic of the Needham-Schroeder protocol / Perini Brogi, C., Spadoni, S.. - 4198:(2026). (ITASEC & SERICS 2026 - Joint National Conference on Cybersecurity 2026 Cagliari, Italy 9-13/02/2026).

Cutting out the middle man: a game-theoretic analysis in computability logic of the Needham-Schroeder protocol

Perini Brogi Cosimo
;
Spadoni Stella
2026

Abstract

Cryptographic protocols constitute the cornerstone of secure communication in open distributed systems. The systematic formal verification of such protocols gained prominence following Gavin Lowe’s 1995 discovery of a structural flaw in the classical Needham-Schroeder Public Key protocol from 1978. This paper presents a novel formal analysis of such protocol through Computability Logic (CoL), a game-theoretic semantics and reasoning system that models interaction between an honest agent and a hostile environment. By formalising the protocol’s execution as a game specified in the CoL fragment CL4, we demonstrate that the original vulnerability allows the environment to employ a successful Copycat Strategy isomorphic to the standard Man-in-the-Middle attack (MitM). Conversely, we prove that the revised protocol including Lowe’s fix effectively breaks this adversarial advantage, guaranteeing security against the MitM. We propose this case study as a promising starting point for the development of a new methodology in protocol verification
2026
Formal Methods, Needham-Schroeder Protocol, Computability Logic, Protocol Verification, Mutual Authentication, CySec Case Studies, Game-Theoretic Semantics, Lowe’s Man-in-the-Middle
File in questo prodotto:
File Dimensione Formato  
paper57.pdf

accesso aperto

Descrizione: Cutting Out the Middle Man: A Game-Theoretic Analysis in Computability Logic of the Needham-Schroeder Protocol
Tipologia: Versione Editoriale (PDF)
Licenza: Creative commons
Dimensione 1.37 MB
Formato Adobe PDF
1.37 MB Adobe PDF Visualizza/Apri

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/20.500.11771/43778
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus ND
  • OpenAlex ND
social impact