Trustworthy Systems

Reasoning about distributed secrets


Nicolas Bordenabe, Annabelle McIver, Carroll Morgan and Tahiry Rabehaja


Macquarie University

UNSW Sydney


In 1977 Tore Dalenius described how partial disclosure about one secret can impact the confidentiality of other correlated secrets, and indeed this phenomenon is well known in privacy of databases. The aim here is to study this issue in a context of programs with distributed secrets. Moreover, we do not assume that secrets never change, in fact we investigate what happens when they do: we explore how updates to some (but not all) secrets can affect confidentiality elsewhere in the system. We provide methods to compute robust upper bounds on the impact of such information leakages with respect to all distributed secrets. Finally we illustrate our results on a defence against side channels.

BibTeX Entry

    address          = {Shanghai},
    author           = {Bordenabe, Nicolas and McIver, Annabelle and Morgan, Carroll and Rabehaja, Tahiry},
    booktitle        = {FORTE},
    date             = {2017-6-18},
    month            = jun,
    pages            = {156-170},
    paperurl         = {},
    publisher        = {Springer},
    title            = {Reasoning About Distributed Secrets},
    year             = {2017}