This paper presents a methodology to facilitate the design and analysis of secure cryptographic protocols. This work is based on a novel notion of a fail-stop protocol, which automatically halts in response to any active attack. This paper suggests types of protocols that are fail-top, outlines some proof techniques for them, and uses examples to illustrate how the notion of a fail-stop protocol can make protocol design easier and can provide more solid basis for some proposed protocol analysis methods.

• sri-csl-tr94-14.ps.gz