Proving Stateful Injective Agreement with Refinement TypesInjective Agreement • October 11th, 2016
Injective agreement properties are useful trace properties in security protocols, as they ensure replay protection. Traditionally injective agreement is ensured with challenge- response mechanisms—where a fresh nonce is sent to be signed along with the response and later checked—however there are increasingly more situations where this pattern is not applicable, hence replay protection must be handled with internal state.
Niklas JohanssonInjective Agreement • May 11th, 2023
ent along the diagonal in step 22. Finally, in step 3 we prove strictness for the relations for which implication was shown in step 1. Step 3 depends on the previous steps, along with Assumption 1. This proves Theorem 1, and additionally shows
