|
Abstract : |
This paper presents a program analysis for secure information ow. The analysis works on a simple imperative programming language containing a cryptographic primitive| encryption|as a possible operation. The analysis captures the intuitive qualities of the (lack of) information ow from a plaintext to its corresponding cryptotext. The analysis is proven correct with respect to a complexity-theoretical de-nition of the security of information ow. The analysis does not put any restrictions on the structure of the program, especially on the ways of how the program uses the encryption keys., |
