Formal Analysis of SET and NSL Protocols Using the Interpretation Functions-Based Method

Table 11

Flaw in the NSL-protocol under the homomorphic assumption.

---

1.1. 𝐴→𝐼∶{𝐴,𝑁¹_𝑎}_𝑘𝑖

   2.1. 𝐼(𝐴)→𝐵∶{𝐴,𝑁¹_𝑎}_𝑘𝑏

   2.2. 𝐵→𝐼(𝐴)∶{𝑁¹_𝑎,𝑁²_𝑏,𝐵}_𝑘𝑎

1.2. 𝐼→𝐴∶{𝑁¹_𝑎,𝑁²_𝑏,𝐼}_𝑘𝑎

1.3. 𝐴→𝐼∶{𝑁²_𝑏}_𝑘𝑖

   2.3. 𝐼(𝐴)→𝐵∶{𝑁²_𝑏}_𝑘𝑏

---