{"id":"https://openalex.org/W7163582593","doi":"https://doi.org/10.1145/3779208.3805979","title":"Formal Verification of EDHOC-PSK: A Symbolic Approach with SAPIC+","display_name":"Formal Verification of EDHOC-PSK: A Symbolic Approach with SAPIC+","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163582593","doi":"https://doi.org/10.1145/3779208.3805979"},"language":"en","primary_location":{"id":"doi:10.1145/3779208.3805979","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3805979","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3779208.3805979","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104347509","display_name":"Elsa L\u00f3pez P\u00e9rez","orcid":"https://orcid.org/0009-0008-2498-4397"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Elsa L\u00f3pez P\u00e9rez","raw_affiliation_strings":["Inria Paris, Paris, France"],"raw_orcid":"https://orcid.org/0009-0008-2498-4397","affiliations":[{"raw_affiliation_string":"Inria Paris, Paris, France","institution_ids":["https://openalex.org/I1326498283"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137900516","display_name":"Thomas Watteyne","orcid":"https://orcid.org/0000-0002-3695-9315"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thomas Watteyne","raw_affiliation_strings":["Unaffiliated, Paris, France"],"raw_orcid":"https://orcid.org/0000-0002-3695-9315","affiliations":[{"raw_affiliation_string":"Unaffiliated, Paris, France","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049076260","display_name":"Cristina Onete","orcid":"https://orcid.org/0009-0009-4638-0639"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I65806277","display_name":"Universit\u00e9 de Limoges","ror":"https://ror.org/02cp04407","country_code":"FR","type":"education","lineage":["https://openalex.org/I65806277"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Cristina Onete","raw_affiliation_strings":["University of Limoges, XLIM, CNRS UMR 7252, Limoges, France"],"raw_orcid":"https://orcid.org/0009-0009-4638-0639","affiliations":[{"raw_affiliation_string":"University of Limoges, XLIM, CNRS UMR 7252, Limoges, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I65806277"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093906175","display_name":"Dhekra Mahmoud","orcid":"https://orcid.org/0009-0002-0555-0581"},"institutions":[{"id":"https://openalex.org/I198244214","display_name":"Universit\u00e9 Clermont Auvergne","ror":"https://ror.org/01a8ajp46","country_code":"FR","type":"education","lineage":["https://openalex.org/I198244214"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Dhekra Mahmoud","raw_affiliation_strings":["Universit\u00e9 Clermont Auvergne, Clermont-Ferrand, France"],"raw_orcid":"https://orcid.org/0009-0002-0555-0581","affiliations":[{"raw_affiliation_string":"Universit\u00e9 Clermont Auvergne, Clermont-Ferrand, France","institution_ids":["https://openalex.org/I198244214"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137866026","display_name":"Pascal Lafourcade","orcid":"https://orcid.org/0000-0002-4459-511X"},"institutions":[{"id":"https://openalex.org/I198244214","display_name":"Universit\u00e9 Clermont Auvergne","ror":"https://ror.org/01a8ajp46","country_code":"FR","type":"education","lineage":["https://openalex.org/I198244214"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Pascal Lafourcade","raw_affiliation_strings":["Universit\u00e9 Clermont Auvergne, Clermont-Ferrand, France"],"raw_orcid":"https://orcid.org/0000-0002-4459-511X","affiliations":[{"raw_affiliation_string":"Universit\u00e9 Clermont Auvergne, Clermont-Ferrand, France","institution_ids":["https://openalex.org/I198244214"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044226565","display_name":"Vaishnavi Sundararajan","orcid":"https://orcid.org/0000-0002-5945-5208"},"institutions":[{"id":"https://openalex.org/I68891433","display_name":"Indian Institute of Technology Delhi","ror":"https://ror.org/049tgcd06","country_code":"IN","type":"education","lineage":["https://openalex.org/I68891433"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Vaishnavi Sundararajan","raw_affiliation_strings":["IIT Delhi, Delhi, India"],"raw_orcid":"https://orcid.org/0000-0002-5945-5208","affiliations":[{"raw_affiliation_string":"IIT Delhi, Delhi, India","institution_ids":["https://openalex.org/I68891433"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5137861777","display_name":"Mali\u0161a Vu\u010dini\u0107","orcid":"https://orcid.org/0000-0002-7700-9121"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Mali\u0161a Vu\u010dini\u0107","raw_affiliation_strings":["Inria Paris, Paris, France"],"raw_orcid":"https://orcid.org/0000-0002-7700-9121","affiliations":[{"raw_affiliation_string":"Inria Paris, Paris, France","institution_ids":["https://openalex.org/I1326498283"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1584","last_page":"1597"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.40380001068115234,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.40380001068115234,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.38830000162124634,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11498","display_name":"Security in Wireless Sensor Networks","score":0.03460000082850456,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anonymity","display_name":"Anonymity","score":0.6358000040054321},{"id":"https://openalex.org/keywords/secrecy","display_name":"Secrecy","score":0.6197999715805054},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.5647000074386597},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5534999966621399},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.5013999938964844},{"id":"https://openalex.org/keywords/ephemeral-key","display_name":"Ephemeral key","score":0.4966999888420105},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.474700003862381},{"id":"https://openalex.org/keywords/authenticated-key-exchange","display_name":"Authenticated Key Exchange","score":0.4634999930858612},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.4284999966621399},{"id":"https://openalex.org/keywords/session-key","display_name":"Session key","score":0.4239000082015991}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8173999786376953},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.6358000040054321},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.6197999715805054},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.5647000074386597},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5552999973297119},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5534999966621399},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.5013999938964844},{"id":"https://openalex.org/C76947770","wikidata":"https://www.wikidata.org/wiki/Q4533181","display_name":"Ephemeral key","level":2,"score":0.4966999888420105},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.474700003862381},{"id":"https://openalex.org/C2777572472","wikidata":"https://www.wikidata.org/wiki/Q4825878","display_name":"Authenticated Key Exchange","level":5,"score":0.4634999930858612},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4284999966621399},{"id":"https://openalex.org/C191197275","wikidata":"https://www.wikidata.org/wiki/Q1755775","display_name":"Session key","level":3,"score":0.4239000082015991},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4198000133037567},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.39480000734329224},{"id":"https://openalex.org/C2985583900","wikidata":"https://www.wikidata.org/wiki/Q722617","display_name":"Formal description","level":2,"score":0.3898000121116638},{"id":"https://openalex.org/C205009425","wikidata":"https://www.wikidata.org/wiki/Q935662","display_name":"Forward secrecy","level":4,"score":0.38760000467300415},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3874000012874603},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.3871999979019165},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.3831999897956848},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3765999972820282},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.3702999949455261},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.36719998717308044},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.36230000853538513},{"id":"https://openalex.org/C99674996","wikidata":"https://www.wikidata.org/wiki/Q1414155","display_name":"Key exchange","level":4,"score":0.35740000009536743},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.34139999747276306},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.3366999924182892},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.33219999074935913},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3149000108242035},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.31139999628067017},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.29670000076293945},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.2646999955177307},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.2549999952316284},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.2547000050544739},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.25279998779296875}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3779208.3805979","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3805979","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-05643978v1","is_oa":true,"landing_page_url":"https://hal.science/hal-05643978","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ACM ASIACCS 2026 - 21st ACM ASIA Conference on Computer and Communications Security, Jun 2026, Bangalore, India. ⟨10.1145/3779208.3805979⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/3779208.3805979","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3805979","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6443760395050049,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W34367126","https://openalex.org/W146244851","https://openalex.org/W187669579","https://openalex.org/W2029693536","https://openalex.org/W2052267638","https://openalex.org/W2055259417","https://openalex.org/W2097711642","https://openalex.org/W2146537406","https://openalex.org/W2336945419","https://openalex.org/W2544274814","https://openalex.org/W2807731952","https://openalex.org/W3106668253","https://openalex.org/W4223527643","https://openalex.org/W4285080215","https://openalex.org/W4308391476","https://openalex.org/W4392742119","https://openalex.org/W4396657226","https://openalex.org/W4402041261"],"related_works":[],"abstract_inverted_index":{"EDHOC":[0],"is":[1,44],"a":[2,38,51,62,103,156],"lightweight":[3],"authenticated":[4],"key":[5,101],"exchange":[6],"protocol":[7],"designed":[8],"for":[9,36,137,147],"constrained":[10],"IoT":[11,29],"devices.":[12],"It":[13],"currently":[14,45],"supports":[15],"asymmetric":[16],"authentication,":[17,37,110],"either":[18],"using":[19,58],"digital":[20],"signatures":[21],"or":[22],"static":[23],"Diffie-Hellman":[24],"(DH)":[25],"keys.":[26],"Since":[27],"many":[28],"deployments":[30],"rely":[31],"on":[32],"Pre-Shared":[33,95],"Keys":[34],"(PSK)":[35],"new":[39],"PSK-based":[40],"authentication":[41],"method":[42],"(EDHOC-PSK)":[43],"under":[46,150],"standardization.":[47],"This":[48],"paper":[49],"presents":[50],"symbolic":[52],"analysis":[53],"EDHOC-PSK":[54,134],"(draft":[55],"version":[56],"06)":[57],"SAPIC+,":[59],"which":[60,174],"compiles":[61],"single":[63],"formal":[64],"specification":[65,122],"into":[66],"multiple":[67],"state-of-the-art":[68],"verification":[69],"tools,":[70],"including":[71,86],"Tamarin":[72],"and":[73,102,111,118,129,161],"ProVerif.":[74],"Our":[75],"model":[76],"extends":[77],"the":[78,93,99,108,116,121,148],"typical":[79],"Dolev-Yao":[80],"(DY)":[81],"adversary":[82,160],"with":[83],"additional":[84],"capabilities,":[85],"leakage":[87,91,97],"of":[88,92,98,123],"ephemeral":[89],"secrets,":[90],"long-term":[94],"Key":[96],"session":[100],"discrete-logarithm":[104],"oracle.":[105],"We":[106,131],"verify":[107],"confidentiality,":[109],"key-agreement":[112],"properties":[113,166],"stated":[114],"in":[115],"draft,":[117],"we":[119,154],"refine":[120],"identity":[124],"protection":[125],"by":[126],"distinguishing":[127],"anonymity":[128,136],"unlinkability.":[130],"show":[132],"that":[133,163],"achieves":[135],"both":[138],"parties":[139],"against":[140],"active":[141],"attackers,":[142],"while":[143],"unlinkability":[144],"holds":[145],"only":[146],"Initiator":[149],"passive":[151],"attackers.":[152],"Finally,":[153],"analyze":[155],"post-quantum":[157],"Store-Now-Decrypt-Later":[158],"(SNDL)":[159],"find":[162],"all":[164],"proven":[165],"remain":[167],"intact":[168],"except":[169],"Perfect":[170],"Forward":[171],"Secrecy":[172],"(PFS),":[173],"cannot":[175],"be":[176],"preserved":[177],"once":[178],"DH":[179],"secrets":[180],"are":[181],"recoverable.":[182]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-06-05T00:00:00"}