Proof Outline
Assumption: GCS provides Virtual Synchrony semantics.
Prove: Key agreement protocol preserves the semantics.
- The application is not allowed to send messages while the key agreement is performed.
-
- The key agreement protocol does not reorder messages.
-
Prove: the security of the Cliques protocols is preserved.