Specifying Trace Properties in tamarin
摘要
Now that we have seen how a protocol model is specified using multiset rewriting, we turn to the question of how to specify protocols’ intended security properties. Among the usual properties that we are interested in are (key) secrecy and different kinds of agreement properties. These are expressible as so-called trace properties, which we examine in this chapter. We will address other kinds of properties, in particular privacy-style properties, which are usually represented as equivalence properties, in Chap. 13.