Re: A broken brand?
"Mark Miller" <[email protected]>
| Newsgroups | gmane.comp.lang.e.general |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Mar 13, 2008 at 2:56 PM, Toby Murray <[email protected]> wrote: > I fear that without one, object-cap engineering cannot be taken > seriously. My understanding is that work in crypto protocols really > blossomed once formal statements of their security properties were able > to be written and their (abstract) implementations verified against > these properties (under standard e.g. Dolev-Yao assumptions about the > abilities of an attacker). It would be nice to be able to do likewise to > object-cap patterns. We can rephrase the problem, the various solution (both correct and incorrect), and the attack in crypto protocol terms. Does this lead to any insight about how one might specify the properties that a crypto protocol must have to correctly solve this problem? -- Text by me above is hereby placed in the public domain Cheers, --MarkM