Secure information flow with random assignment and encryption
- 3 November 2006
- proceedings article
- Published by Association for Computing Machinery (ACM)
Abstract
Type systems for secure information flow aim to prevent a program from leaking information from variables classified as $H$ to variables classified as $L$. In this work we extend such a type system to address encryption and decryption; our intuition is that encrypting a $H$ plaintext yields a $L$ ciphertext. We argue that well-typed, polynomial-time programs in our system satisfy a computational probabilistic noninterference property, provided that the encryption scheme is IND-CCA secure. As a part of our proof, we first consider secure information flow in a language with a random assignment operator (but no encryption). We establish a result that may be of independent interest, namely, that well-typed, probabilistically total programs with random assignments satisfy probabilistic noninterference. We establish this result using a weak probabilistic bisimulation.
Keywords
This publication has 13 references indexed in Scilit:
- Secrecy types for a simulatable cryptographic libraryPublished by Association for Computing Machinery (ACM) ,2005
- Dimensions and Principles of DeclassificationPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2005
- Security-Typed Languages for Implementation of Cryptographic Protocols: A Case StudyPublished by Springer Nature ,2005
- A Type System for Computationally Secure Information FlowPublished by Springer Nature ,2005
- Probabilistic noninterference through weak probabilistic bisimulationPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2004
- Handling Encryption in an Analysis for Secure Information FlowPublished by Springer Nature ,2003
- Language-based information-flow securityIEEE Journal on Selected Areas in Communications, 2003
- Specification and refinement of probabilistic processesPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2002
- A pump for rapid, reliable, secure communicationPublished by Association for Computing Machinery (ACM) ,1993
- Certification of programs for secure information flowCommunications of the ACM, 1977