Beyond the Finite Variant Property: Extending Symbolic Diffie-Hellman Group Models (Extended Version)

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Giampietro, Sofia, Sasse, Ralf, Basin, David
Format: Preprint
Published: 2026
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866912859698495488
author Giampietro, Sofia
Sasse, Ralf
Basin, David
author_facet Giampietro, Sofia
Sasse, Ralf
Basin, David
contents Diffie-Hellman groups are commonly used in cryptographic protocols. While most state-of-the-art, symbolic protocol verifiers support them to some degree, they do not support all mathematical operations possible in these groups. In particular, they lack support for exponent addition, as these tools reason about terms using unification, which is undecidable in the theory describing all Diffie-Hellman operators. In this paper we approximate such a theory and propose a semi-decision procedure to determine whether a protocol, which may use all operations in such groups, satisfies user-defined properties. We implement this approach by extending the Tamarin prover to support the full Diffie-Hellman theory, including group element multiplication and hence addition of exponents. This is the first time a state-of-the-art tool can model and reason about such protocols. We illustrate our approach's effectiveness with different case studies: ElGamal encryption and MQV. Using Tamarin, we prove security properties of ElGamal, and we rediscover known attacks on MQV.
format Preprint
id arxiv_https___arxiv_org_abs_2601_21910
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Beyond the Finite Variant Property: Extending Symbolic Diffie-Hellman Group Models (Extended Version)
Giampietro, Sofia
Sasse, Ralf
Basin, David
Cryptography and Security
Diffie-Hellman groups are commonly used in cryptographic protocols. While most state-of-the-art, symbolic protocol verifiers support them to some degree, they do not support all mathematical operations possible in these groups. In particular, they lack support for exponent addition, as these tools reason about terms using unification, which is undecidable in the theory describing all Diffie-Hellman operators. In this paper we approximate such a theory and propose a semi-decision procedure to determine whether a protocol, which may use all operations in such groups, satisfies user-defined properties. We implement this approach by extending the Tamarin prover to support the full Diffie-Hellman theory, including group element multiplication and hence addition of exponents. This is the first time a state-of-the-art tool can model and reason about such protocols. We illustrate our approach's effectiveness with different case studies: ElGamal encryption and MQV. Using Tamarin, we prove security properties of ElGamal, and we rediscover known attacks on MQV.
title Beyond the Finite Variant Property: Extending Symbolic Diffie-Hellman Group Models (Extended Version)
topic Cryptography and Security
url https://arxiv.org/abs/2601.21910