Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely:  extend Delaune, Kremer and Steel's framework for analysis of PKCS#11-based APIs from bounded to unbounded fresh data.  achieve this by: formally defining the notion of an attribute policy; showing that a ll-designed API should have a certain class of policy  call complete; showing that APIs with complete policies may be safely abstracted to APIs where the attributes are fixed; and proving that these static APIs can be analysed in a small bounded model such that security properties will hold for the unbounded case.  automate analysis in our framework using the SAT-based security protocol model checker SATMC.  show that a symmetric key management subset of the Eracom PKCS#11 API, used in their ProtectServer product, preserves the secrecy of sensitive keys for unbounded numbers of fresh keys and handles, i.e. pointers to keys.  also show that this API is not robust: if an encryption key is lost to the intruder, SATMC finds an attack whereby all the keys may be compromised.
['Sibylle B. Fröschle', 'Graham Steel']
I am writing a research paper on a idea Analysing PKCS#11 Key Management APIs with Unbounded Fresh Data
[{"from": "human", "value": "I am writing a research paper on a idea Analysing PKCS#11 Key Management APIs with Unbounded Fresh Data"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely:  extend Delaune, Kremer and Steel's framework for analysis of PKCS#11-based APIs from bounded to unbounded fresh data.  achieve this by: formally defining the notion of an attribute policy; showing that a ll-designed API should have a certain class of policy  call complete; showing that APIs with complete policies may be safely abstracted to APIs where the attributes are fixed; and proving that these static APIs can be analysed in a small bounded model such that security properties will hold for the unbounded case.  automate analysis in our framework using the SAT-based security protocol model checker SATMC.  show that a symmetric key management subset of the Eracom PKCS#11 API, used in their ProtectServer product, preserves the secrecy of sensitive keys for unbounded numbers of fresh keys and handles, i.e. pointers to keys.  also show that this API is not robust: if an encryption key is lost to the intruder, SATMC finds an attack whereby all the keys may be compromised."}]