<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04361766</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-18T20:09:14+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Formal Verification of a Post-Quantum Signal Protocol with Tamarin</title>
            <author role="aut">
              <persName>
                <forename type="first">Hugo</forename>
                <surname>Beguinet</surname>
              </persName>
              <email type="md5">4b8fd91dbbb293fa10c64ea4258ab785</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="numeric">1329574</idno>
              <idno type="halauthorid" notation="string">2919979-1329574</idno>
              <affiliation ref="#struct-25027"/>
              <affiliation ref="#struct-250969"/>
              <affiliation ref="#struct-1827"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Céline</forename>
                <surname>Chevalier</surname>
              </persName>
              <email type="md5">ab7aa09745dbce08fa2c3922f841f612</email>
              <email type="domain">ens.fr</email>
              <idno type="idhal" notation="numeric">1307407</idno>
              <idno type="halauthorid" notation="string">42715-1307407</idno>
              <idno type="ORCID">https://orcid.org/0009-0006-4231-4958</idno>
              <idno type="IDREF">https://www.idref.fr/091517427</idno>
              <idno type="VIAF">https://viaf.org/viaf/12582223</idno>
              <idno type="ISNI">http://isni.org/isni/0000000002930413</idno>
              <affiliation ref="#struct-25027"/>
              <affiliation ref="#struct-1091427"/>
              <affiliation ref="#struct-1827"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Thomas</forename>
                <surname>Ricosset</surname>
              </persName>
              <idno type="idhal" notation="numeric">1288915</idno>
              <idno type="halauthorid" notation="string">1474106-1288915</idno>
              <idno type="IDREF">https://www.idref.fr/236005375</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-8841-1087</idno>
              <affiliation ref="#struct-555382"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Hugo</forename>
                <surname>Senet</surname>
              </persName>
              <idno type="idhal" notation="numeric">1307411</idno>
              <idno type="halauthorid" notation="string">2951487-1307411</idno>
              <idno type="ORCID">https://orcid.org/0009-0004-0110-2700</idno>
              <affiliation ref="#struct-25027"/>
              <affiliation ref="#struct-555382"/>
              <affiliation ref="#struct-454320"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hugo</forename>
                <surname>BEGUINET</surname>
              </persName>
              <email type="md5">4b8fd91dbbb293fa10c64ea4258ab785</email>
              <email type="domain">gmail.com</email>
            </editor>
            <funder>This work is partially supported by ‘‘SoBigData.it receives funding from European Union – NextGenerationEU – National Recovery and Resilience Plan (Piano Nazionale di Ripresa e Resilienza, PNRR) – Project: ‘‘SoBigData.it – Strengthening the Italian RI for Social Mining and Big Data Analytics’’ – Prot. IR0000013 – Avviso n. 3264 del28/12/2021</funder>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2024-01-22 09:55:23</date>
              <date type="whenModified">2025-10-27 11:30:02</date>
              <date type="whenReleased">2024-01-22 11:00:07</date>
              <date type="whenProduced">2023-10-18</date>
              <date type="whenEndEmbargoed">2024-01-22</date>
              <ref type="file" target="https://hal.science/hal-04361766v1/document">
                <date notBefore="2024-01-22"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04361766v1/file/main.pdf" id="file-4361766-3830447">
                <date notBefore="2024-01-22"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="1381576">
                <persName>
                  <forename>Hugo</forename>
                  <surname>BEGUINET</surname>
                </persName>
                <email type="md5">4b8fd91dbbb293fa10c64ea4258ab785</email>
                <email type="domain">gmail.com</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04361766</idno>
            <idno type="halUri">https://hal.science/hal-04361766</idno>
            <idno type="halBibtex">beguinet:hal-04361766</idno>
            <idno type="halRefHtml">&lt;i&gt;VECOS 2023 - 16th International Conference on Verification and Evaluation of Computer and Communication Systems&lt;/i&gt;, Oct 2023, Marrakech, Morocco. pp.105-121, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-031-49737-7_8"&gt;&amp;#x27E8;10.1007/978-3-031-49737-7_8&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">VECOS 2023 - 16th International Conference on Verification and Evaluation of Computer and Communication Systems, Oct 2023, Marrakech, Morocco. pp.105-121, &amp;#x27E8;10.1007/978-3-031-49737-7_8&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-4361766-3830447"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="ENS-PARIS">Ecole Normale Supérieure de Paris</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="INRIA-ROCQ">INRIA Paris - Rocquencourt</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="PSL">Université Paris sciences et lettres</idno>
            <idno type="stamp" n="INRIA-PSL">INRIA-PSL</idno>
            <idno type="stamp" n="ENS-PSL" corresp="PSL">École normale supérieure - PSL</idno>
            <idno type="stamp" n="PANTHEON-ASSAS-UNIVERSITE">Université Paris-Panthéon-Assas</idno>
            <idno type="stamp" n="UNIV-ASSAS" corresp="PANTHEON-ASSAS-UNIVERSITE">Université Paris-Panthéon-Assas</idno>
            <idno type="stamp" n="DIENS" corresp="ENS-PARIS">Département d'informatique de l'ENS-PSL</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Formal Verification of a Post-Quantum Signal Protocol with Tamarin</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Hugo</forename>
                    <surname>Beguinet</surname>
                  </persName>
                  <email type="md5">4b8fd91dbbb293fa10c64ea4258ab785</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="numeric">1329574</idno>
                  <idno type="halauthorid" notation="string">2919979-1329574</idno>
                  <affiliation ref="#struct-25027"/>
                  <affiliation ref="#struct-250969"/>
                  <affiliation ref="#struct-1827"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Céline</forename>
                    <surname>Chevalier</surname>
                  </persName>
                  <email type="md5">ab7aa09745dbce08fa2c3922f841f612</email>
                  <email type="domain">ens.fr</email>
                  <idno type="idhal" notation="numeric">1307407</idno>
                  <idno type="halauthorid" notation="string">42715-1307407</idno>
                  <idno type="ORCID">https://orcid.org/0009-0006-4231-4958</idno>
                  <idno type="IDREF">https://www.idref.fr/091517427</idno>
                  <idno type="VIAF">https://viaf.org/viaf/12582223</idno>
                  <idno type="ISNI">http://isni.org/isni/0000000002930413</idno>
                  <affiliation ref="#struct-25027"/>
                  <affiliation ref="#struct-1091427"/>
                  <affiliation ref="#struct-1827"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Thomas</forename>
                    <surname>Ricosset</surname>
                  </persName>
                  <idno type="idhal" notation="numeric">1288915</idno>
                  <idno type="halauthorid" notation="string">1474106-1288915</idno>
                  <idno type="IDREF">https://www.idref.fr/236005375</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-8841-1087</idno>
                  <affiliation ref="#struct-555382"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Hugo</forename>
                    <surname>Senet</surname>
                  </persName>
                  <idno type="idhal" notation="numeric">1307411</idno>
                  <idno type="halauthorid" notation="string">2951487-1307411</idno>
                  <idno type="ORCID">https://orcid.org/0009-0004-0110-2700</idno>
                  <affiliation ref="#struct-25027"/>
                  <affiliation ref="#struct-555382"/>
                  <affiliation ref="#struct-454320"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">LNCS</title>
                <meeting>
                  <title>VECOS 2023 - 16th International Conference on Verification and Evaluation of Computer and Communication Systems</title>
                  <date type="start">2023-10-18</date>
                  <date type="end">2023-10-20</date>
                  <settlement>Marrakech</settlement>
                  <country key="MA">Morocco</country>
                </meeting>
                <editor>Belgacem Ben Hedia</editor>
                <editor>Yassine Maleh</editor>
                <editor>Moez Krichen</editor>
                <imprint>
                  <publisher>Springer Nature Switzerland</publisher>
                  <pubPlace>Cham</pubPlace>
                  <biblScope unit="serie">Lecture Notes in Computer Science</biblScope>
                  <biblScope unit="volume">14368</biblScope>
                  <biblScope unit="pp">105-121</biblScope>
                  <date type="datePub">2024-12-19</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-031-49737-7_8</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Secure instant messaging</term>
                <term xml:lang="en">Signal protocol</term>
                <term xml:lang="en">Quantum resistant</term>
                <term xml:lang="en">Formal verification</term>
                <term xml:lang="en">Tamarin prover</term>
                <term xml:lang="en">X3DH</term>
                <term xml:lang="en">Double ratchet</term>
                <term xml:lang="en">IoT</term>
                <term xml:lang="en">Serverless</term>
                <term xml:lang="en">Deviceless</term>
                <term xml:lang="en">FaaS</term>
                <term xml:lang="en">Edge computing</term>
                <term xml:lang="en">Stack4Things</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>The Signal protocol is used by billions of people for instant messaging in applications such as Facebook Messenger, Google Messages, Signal,Skype, and WhatsApp. However, advances in quantum computing threaten thesecurity of the cornerstone of this protocol: the Diffie-Hellman key exchange.There actually are resistant alternatives, called post-quantum secure, but replacing the Diffie-Hellman key exchange with these new primitives requires a deeprevision of the associated security proof. While the security of the current Signalprotocol has been extensively studied with hand-written proofs and computerverified symbolic analyses, its quantum-resistant variants lack symbolic securityanalyses.In this work, we present the first symbolic security model for post-quantum variants of the Signal protocol. Our model focuses on the core state machines of thetwo main sub-protocols of Signal: the X3DH handshake, and the so-called double ratchet protocol. Then we show, with an automated proof using the Tamarinprover, that instantiated with the Hashimoto-Katsumata-Kwiatkowski-Prest postquantum Signal’s handshake from PKC’21, and the Alwen-Coretti-Dodis KEMbased double ratchet from EUROCRYPT’19, the resulting post-quantum Signalprotocol has equivalent security properties to its current classical counterpart.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="regrouplaboratory" xml:id="struct-25027" status="VALID">
          <idno type="IdRef">148034055</idno>
          <idno type="RNSR">199812876J</idno>
          <idno type="ROR">05y6rqs46</idno>
          <orgName>Département d'informatique - ENS-PSL</orgName>
          <orgName type="acronym">DI-ENS</orgName>
          <date type="start">1999-01-01</date>
          <desc>
            <address>
              <addrLine>École normale supérieure 45 rue d'Ulm F-75230 Paris Cedex 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.di.ens.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-59704" type="direct"/>
            <relation active="#struct-564132" type="indirect"/>
            <relation active="#struct-300009" type="direct"/>
            <relation name="UMR8548" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-250969" status="VALID">
          <orgName>THALES [France]</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.thalesgroup.com/fr/europe/france</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-1827" status="VALID">
          <orgName>CNRS-formation Entreprise</orgName>
          <orgName type="acronym">CFE</orgName>
          <desc>
            <address>
              <addrLine>bat. 31 Av de la terrasse 91198 GIF SUR YVETTE CEDEX</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.cnrs-gif.fr/cnrsformation/</ref>
          </desc>
          <listRelation>
            <relation name="UPS1564" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-1091427" status="VALID">
          <idno type="IdRef">260745863</idno>
          <idno type="ISNI">0000 0001 2299 9829</idno>
          <idno type="ROR">https://ror.org/04qb2qm38</idno>
          <orgName>Université Paris-Panthéon-Assas</orgName>
          <date type="start">2022-01-01</date>
          <desc>
            <address>
              <addrLine>12 place du Panthéon - 75231 Paris Cedex 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.u-paris2.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-555382" status="VALID">
          <orgName>Thales SIX GTS France</orgName>
          <desc>
            <address>
              <addrLine>92230 Gennevilliers</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://industrie.usinenouvelle.com/fiche/etablissement/thales-six-gts-france-sas-52062354</ref>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-454320" status="VALID">
          <idno type="IdRef">241283752</idno>
          <idno type="RNSR">200818333X</idno>
          <idno type="ROR">https://ror.org/04zpj8n12</idno>
          <orgName>Construction and Analysis of Systems for Confidentiality and Authenticity of Data and Entities</orgName>
          <orgName type="acronym">CASCADE</orgName>
          <date type="start">2016-04-01</date>
          <date type="end">2028-12-31</date>
          <desc>
            <address>
              <addrLine>45, rue d'Ulm 75230 Paris Cedex 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/cascade</ref>
          </desc>
          <listRelation>
            <relation active="#struct-25027" type="direct"/>
            <relation active="#struct-59704" type="indirect"/>
            <relation active="#struct-564132" type="indirect"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation name="UMR8548" active="#struct-441569" type="direct"/>
            <relation active="#struct-441569" type="direct"/>
            <relation active="#struct-454310" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-59704" status="VALID">
          <idno type="IdRef">031738419</idno>
          <idno type="ISNI">0000000123532622</idno>
          <idno type="ROR">https://ror.org/05a0dhs15</idno>
          <orgName>École normale supérieure - Paris</orgName>
          <orgName type="acronym">ENS-PSL</orgName>
          <date type="start">1985-07-24</date>
          <desc>
            <address>
              <addrLine>45, Rue d'Ulm - 75230 Paris cedex 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ens.psl.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-564132" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-564132" status="VALID">
          <idno type="IdRef">241597595</idno>
          <idno type="ISNI">0000 0004 1784 3645</idno>
          <idno type="ROR">https://ror.org/013cjyk83</idno>
          <orgName>Université Paris Sciences et Lettres</orgName>
          <orgName type="acronym">PSL</orgName>
          <desc>
            <address>
              <addrLine>60 rue Mazarine 75006 Paris</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.psl.eu/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-454310" status="VALID">
          <idno type="IdRef">241614864</idno>
          <idno type="RNSR">196718247G</idno>
          <idno type="ROR">https://ror.org/05eyd5d35</idno>
          <orgName>Centre Inria de Paris</orgName>
          <date type="start">2016-03-10</date>
          <desc>
            <address>
              <addrLine>48 Rue Barrault, 75013 Paris</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/paris</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>