Polynomial Fairness and Liveness

Important properties of many protocols are liveness or availability, i.e., that something good happens now and then. In asynchronous scenarios these properties obviously depend on the scheduler, which is usually considered to be fair in this case. Unfortunately, the standard definitions of fairness and liveness based on infinite sequences cannot be applied for most cryptographic protocols since one must restrict the adversary and the runs as a whole to polynomial length. We present the first general definition of polynomial fairness and liveness in asynchronous scenarios which is suited to cope with arbitrary cryptographic protocols. Furthermore, our definitions provide a link to the common approach of simulatability which is used throughout modern cryptography, and we show that polynomial liveness is maintained under simulatability. As an example we present act specification and a secure implementation of secure message transmission with reliable channels, and prove them to ful...

• Type: Conference
• Year: 2002
• Where: CSFW
• Authors: Michael Backes, Birgit Pfitzmann, Michael Steiner, Michael Waidner
• Keywords: Asynchronous Scenarios, Cryptographic Protocols, CSFW 2002, Polynomial, Security Privacy