Re: Suggestion for work in Cryptographic Protocol Analysis

Andr=E9 wrote:
> I'm an under graduating student from Brazil and I'm
> intending to do my graduate work on Cryptographic
> Protocol Analysis, but I'm not sure what way to
> follow.
> There are many research in this area; I have read
> about  Contraint Solving and it's very interesting;
> also I read about CAPSL and it's interesting too. I've
> read a paper from Catherine Meadows about trends in
> this area that cited analysis in cryptographic
> protocols including Denial of Service attacks, and
> it's also interesting. Also I've read about multiset
> rewriting ...
> In resume: I've read a lot of topics but I'm lost; I
> don't know what way to follow and where I can start.
> Does anybody have any suggestion for me? I have about
> a year to conclude my work.
> =20

http://www.openwall.com/advisories/OW-003-ssh-traffic-analysis/

There's a complete SSH protocol analysis (slides and all) by the fairly=20
well-known Solar Designer (Alexander Peslyak), a notoriously paranoid=20
programmer with a good bit of knowledge about mostly anything that's=20
even remotely security related.

It should give you a good idea of how to go about doing the actual work=20
and I expect you can cut'n paste a lot of it straight off.

/exon