Deciding Equivalence Properties in Security Protocols - Theory and Practice

This course focuses on the theory and practice of deciding equivalence properties in security protocols. The learning outcomes include understanding new complexity results for static equivalence, trace equivalence, and labelled bisimilarity, as well as learning a decision procedure for these equivalences in the case of a bounded number of sessions. The course teaches skills in implementing the verification procedure in the DEEPSEC tool and conducting efficient analysis of cryptographic protocols. The teaching method involves theoretical discussions, practical demonstrations, and experimental validation. The intended audience for this course includes security professionals, cryptographers, researchers, and individuals interested in automated verification of cryptographic protocols.