<!DOCTYPE html>
<html class="client-nojs vector-feature-night-mode-disabled vector-feature-language-in-header-enabled vector-feature-language-in-main-page-header-disabled vector-feature-page-tools-pinned-disabled vector-feature-toc-pinned-clientpref-1 vector-feature-main-menu-pinned-disabled vector-feature-limited-width-clientpref-1 vector-feature-limited-width-content-enabled vector-feature-custom-font-size-clientpref-1 vector-feature-appearance-pinned-clientpref-1 vector-sticky-header-enabled" lang="en" dir="ltr"><head>
<meta charset="UTF-8">
<title>Security protocol notation</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="canonical" href="https://en.wikipedia.org/wiki/Security_protocol_notation"> <link href="./mw/ext.cite.styles.css" rel="stylesheet" type="text/css">
<link href="./mw/ext.math.styles.css" rel="stylesheet" type="text/css">
<link href="./mw/skins.vector.icons.css" rel="stylesheet" type="text/css">
<link href="./mw/skins.vector.search.codex.styles.css" rel="stylesheet" type="text/css">
<link href="./mw/skins.vector.styles.css" rel="stylesheet" type="text/css">
<link href="./mw/user.styles.css" rel="stylesheet" type="text/css">
<meta name="ResourceLoaderDynamicStyles" content="">
<link rel="stylesheet" type="text/css" href="./mw/site.styles.css">
<link rel="stylesheet" type="text/css" href="./mw/noscript.css">
<link rel="stylesheet" type="text/css" href="./footer.css">
<link rel="stylesheet" type="text/css" href="./vector-2022.css">
</head>
<body class="skin--responsive skin-vector skin-vector-search-vue mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-Security_protocol_notation rootpage-Security_protocol_notation skin-vector-2022 action-view">
<div class="mw-page-container">
<div class="mw-page-container-inner">
<div class="mw-content-container">
<main id="content" class="mw-body">
<header class="mw-body-header vector-page-titlebar">
<h1 id="firstHeading" class="firstHeading mw-first-heading">
<span id="openzim-page-title" class="mw-page-title-main"><span class="mw-page-title-main">Security protocol notation</span></span>
</h1>
</header>
<a id="top"></a>
<div id="bodyContent" class="vector-body ve-init-mw-desktopArticleTarget-targetContainer" aria-labelledby="firstHeading" data-mw-ve-target-container="">
<div id="mw-content-text" class="mw-body-content mw-content-ltr" lang="en" dir="ltr"><div class="mw-content-ltr mw-parser-output" lang="en" dir="ltr">
<p>In <a href="Cryptography" title="Cryptography">cryptography</a>, <b>security (engineering) protocol notation</b>, also known as <b>protocol narrations</b><sup id="cite_ref-1" class="reference"><a href="#cite_note-1"><span class="cite-bracket">[</span>1<span class="cite-bracket">]</span></a></sup> and <b>Alice & Bob notation</b>, is a way of expressing a <a href="Cryptographic_protocol" title="Cryptographic protocol">protocol</a> of correspondence between entities of a dynamic system, such as a <a href="Computer_network" title="Computer network">computer network</a>. In the context of a <a href="Formal_model" class="mw-redirect" title="Formal model">formal model</a>, it allows reasoning about the properties of such a system.
</p><p>The standard notation consists of a set of principals (traditionally named <a href="Alice_and_Bob" title="Alice and Bob">Alice, Bob</a>, Charlie, and so on) who wish to communicate. They may have access to a server S, shared keys K, timestamps T, and can generate <a href="Cryptographic_nonce" title="Cryptographic nonce">nonces</a> N for authentication purposes.
</p><p>A simple example might be the following:
</p>
<dl><dd><span class="mwe-math-element mwe-math-element-inline"><span class="mwe-math-mathml-inline mwe-math-mathml-a11y" style="display: none;"><math xmlns="http://www.w3.org/1998/Math/MathML" alttext="{\displaystyle A\rightarrow B:\{X\}_{K_{A,B}}}">
<semantics>
<mrow class="MJX-TeXAtom-ORD">
<mstyle displaystyle="true" scriptlevel="0">
<mi>A</mi>
<mo stretchy="false">→<!-- → --></mo>
<mi>B</mi>
<mo>:</mo>
<mo fence="false" stretchy="false">{</mo>
<mi>X</mi>
<msub>
<mo fence="false" stretchy="false">}</mo>
<mrow class="MJX-TeXAtom-ORD">
<msub>
<mi>K</mi>
<mrow class="MJX-TeXAtom-ORD">
<mi>A</mi>
<mo>,</mo>
<mi>B</mi>
</mrow>
</msub>
</mrow>
</msub>
</mstyle>
</mrow>
<annotation encoding="application/x-tex">{\displaystyle A\rightarrow B:\{X\}_{K_{A,B}}}</annotation>
</semantics>
</math></span><img src="./8aea7612a5a95fd14f7e994131d0e1d236afe876.svg" class="mwe-math-fallback-image-inline mw-invert skin-invert" aria-hidden="true" style="vertical-align: -1.338ex; width:17.54ex; height:3.343ex;" alt="{\displaystyle A\rightarrow B:\{X\}_{K_{A,B}}}" loading="lazy"></span></dd></dl>
<p>This states that <b>A</b>lice intends a message for <b>B</b>ob consisting of a <a href="Plaintext" title="Plaintext">plaintext</a> <b>X</b> encrypted under shared key <b>K<sub>A,B</sub></b>.
</p><p>Another example might be the following:
</p>
<dl><dd><span class="mwe-math-element mwe-math-element-inline"><span class="mwe-math-mathml-inline mwe-math-mathml-a11y" style="display: none;"><math xmlns="http://www.w3.org/1998/Math/MathML" alttext="{\displaystyle B\rightarrow A:\{N_{B}\}_{K_{A}}}">
<semantics>
<mrow class="MJX-TeXAtom-ORD">
<mstyle displaystyle="true" scriptlevel="0">
<mi>B</mi>
<mo stretchy="false">→<!-- → --></mo>
<mi>A</mi>
<mo>:</mo>
<mo fence="false" stretchy="false">{</mo>
<msub>
<mi>N</mi>
<mrow class="MJX-TeXAtom-ORD">
<mi>B</mi>
</mrow>
</msub>
<msub>
<mo fence="false" stretchy="false">}</mo>
<mrow class="MJX-TeXAtom-ORD">
<msub>
<mi>K</mi>
<mrow class="MJX-TeXAtom-ORD">
<mi>A</mi>
</mrow>
</msub>
</mrow>
</msub>
</mstyle>
</mrow>
<annotation encoding="application/x-tex">{\displaystyle B\rightarrow A:\{N_{B}\}_{K_{A}}}</annotation>
</semantics>
</math></span><img src="./39926388bedf1da3cd100d1ce76bd22536795407.svg" class="mwe-math-fallback-image-inline mw-invert skin-invert" aria-hidden="true" style="vertical-align: -1.005ex; width:17.521ex; height:3.009ex;" alt="{\displaystyle B\rightarrow A:\{N_{B}\}_{K_{A}}}" loading="lazy"></span></dd></dl>
<p>This states that <b>B</b>ob intends a message for <b>A</b>lice consisting of a <a href="Cryptographic_nonce" title="Cryptographic nonce"><b>n</b>once</a> <b>N<sub>B</sub></b> encrypted using public key of Alice.
</p><p>A key with two subscripts, <b>K<sub>A,B</sub></b>, is a <a href="Symmetric_key" class="mw-redirect" title="Symmetric key">symmetric key</a> shared by the two corresponding individuals. A key with one subscript, <b>K<sub>A</sub></b>, is the public key of the corresponding individual. A private key is represented as the <a href="Inverse_function#Notation" title="Inverse function">inverse</a> of the public key.
</p><p>The notation specifies only the operation and not its semantics — for instance, private key encryption and signature are represented identically.
</p><p>We can express more complicated protocols in such a fashion. See <a href="Kerberos_(protocol)" title="Kerberos (protocol)">Kerberos</a> as an example. Some sources refer to this notation as <i>Kerberos Notation</i>.<sup id="cite_ref-2" class="reference"><a href="#cite_note-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup> Some authors consider the notation used by Steiner, Neuman, & Schiller<sup id="cite_ref-3" class="reference"><a href="#cite_note-3"><span class="cite-bracket">[</span>3<span class="cite-bracket">]</span></a></sup> as a notable reference.<sup id="cite_ref-4" class="reference"><a href="#cite_note-4"><span class="cite-bracket">[</span>4<span class="cite-bracket">]</span></a></sup>
</p><p>Several models exist to reason about security protocols in this way, one of which is <a href="BAN_logic" class="mw-redirect" title="BAN logic">BAN logic</a>.
</p><p>Security protocol notation inspired many of the programming languages used in <a href="Choreographic_programming" title="Choreographic programming">choreographic programming</a>.
</p>
<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>
<div class="mw-references-wrap"><ol class="references">
<li id="cite_note-1"><span class="mw-cite-backlink"><b><a href="#cite_ref-1">^</a></b></span> <span class="reference-text"><style data-mw-deduplicate="TemplateStyles:r1238218222">
/* start https://en.wikipedia.org/ */
.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}
/* end https://en.wikipedia.org/ */
</style><cite id="CITEREFBriaisNestmann2005" class="citation book cs1">Briais, Sébastien; Nestmann, Uwe (2005). <a rel="nofollow" class="external text" href="http://sbriais.online.fr/papers/A_Formal_Semantics_For_Protocol_Narrations_TGC05-final.pdf">"A Formal Semantics for Protocol Narrations"</a> <span class="cs1-format">(PDF)</span>. <i>Trustworthy Global Computing</i>. Lecture Notes in Computer Science. Vol. 3705. pp. <span class="nowrap">163–</span>181. <a href="Bibcode_(identifier)" class="mw-redirect" title="Bibcode (identifier)">Bibcode</a>:<a rel="nofollow" class="external text" href="https://ui.adsabs.harvard.edu/abs/2005LNCS.3705..163B">2005LNCS.3705..163B</a>. <a href="Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<a rel="nofollow" class="external text" href="https://doi.org/10.1007%2F11580850_10">10.1007/11580850_10</a>. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>978-3-540-30007-6</bdi>.</cite></span>
</li>
<li id="cite_note-2"><span class="mw-cite-backlink"><b><a href="#cite_ref-2">^</a></b></span> <span class="reference-text">
<cite id="CITEREFChappell1999" class="citation journal cs1">Chappell, David (1999). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20170815043157/https://www.microsoft.com/msj/0899/kerberos/kerberos.aspx">"Exploring Kerberos, the Protocol for Distributed Security in Windows 2000"</a>. <i>Microsoft Systems Journal</i>. Archived from <a rel="nofollow" class="external text" href="https://www.microsoft.com/msj/0899/kerberos/kerberos.aspx">the original</a> on 2017-08-15.</cite></span>
</li>
<li id="cite_note-3"><span class="mw-cite-backlink"><b><a href="#cite_ref-3">^</a></b></span> <span class="reference-text">
<cite id="CITEREFSteinerNeumanSchiller1988" class="citation conference cs1">Steiner, J. G.; Neuman, B. C.; Schiller, J. I. (February 1988). <a rel="nofollow" class="external text" href="http://clifford.neuman.name/publications/1988/198802-Usenix-Kerberos/198802-Usenix-Steiner-Neuman-Schiller-Kerberos.pdf">"Kerberos: An Authentication Service for Open Network Systems"</a> <span class="cs1-format">(PDF)</span>. <i>Proceedings of the Winter 1988 Usenix Conference</i>. Usenix. Berkeley, CA: USENIX Association. pp. <span class="nowrap">191–</span>201<span class="reference-accessdate">. Retrieved <span class="nowrap">2009-06-10</span></span>.</cite></span>
</li>
<li id="cite_note-4"><span class="mw-cite-backlink"><b><a href="#cite_ref-4">^</a></b></span> <span class="reference-text">
<cite id="CITEREFDavis,_DonSwick,_Ralph1989" class="citation book cs1">Davis, Don; Swick, Ralph (1989-03-17). <a rel="nofollow" class="external text" href="ftp://athena-dist.mit.edu/pub/ATHENA/kerberos/doc/user2user.ps"><i>Workstation Services and Kerberos Authentication at Project Athena</i></a> <span class="cs1-format">(PS)</span>. p. 1<span class="reference-accessdate">. Retrieved <span class="nowrap">2009-06-10</span></span>. <q>…our notation follows Steiner, Neuman, & Schiller,…</q></cite></span>
</li>
</ol></div>
<p><br>
</p>
<style data-mw-deduplicate="TemplateStyles:r1271159938">
/* start https://en.wikipedia.org/ */
.mw-parser-output .asbox{position:relative;overflow:hidden}.mw-parser-output .asbox table{background:transparent}.mw-parser-output .asbox p{margin:0}.mw-parser-output .asbox p+p{margin-top:0.25em}.mw-parser-output .asbox-body{font-style:italic}.mw-parser-output .asbox-note{font-size:smaller}.mw-parser-output .asbox .navbar{position:absolute;top:-0.75em;right:1em;display:none}.mw-parser-output :not(p):not(.asbox)+style+.asbox,.mw-parser-output :not(p):not(.asbox)+link+.asbox{margin-top:3em}
/* end https://en.wikipedia.org/ */
</style></div><!--htdig_noindex--><div><div class="zim-footer">
This article is issued from <a class="external text" title="Last edited on 2023-08-22" href="https://en.wikipedia.org/wiki/?title=Security_protocol_notation&oldid=1171674650">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.
</div>
</div><!--/htdig_noindex--></div>
</div>
</main>
</div>
</div>
</div>
</body></html>