{
  "slug": "dystar",
  "name": "DY*",
  "tagline": "Symbolic protocol verification embedded in F* for executable code",
  "maintainer": "Inria, CISPA, University of Stuttgart",
  "url": "https://github.com/REPROSEC/dolev-yao-star",
  "repo": "https://github.com/REPROSEC/dolev-yao-star",
  "category": "symbolic-protocols",
  "targets": [
    "Protocol implementations in F* (Signal, ACME)"
  ],
  "approach": "Dolev-Yao reasoning inside the F* proof assistant, over executable protocol code",
  "license": "Open source",
  "status": "Research, active",
  "summary": "DY* verifies protocol implementations written in F* against symbolic security properties, so the analysed model is the executable code. It has been applied to Signal and ACME and is the successor to ProScript.",
  "details": [
    "DY* trades automation for precision: the properties hold of the code you run, not a hand-drawn model."
  ],
  "strengths": [
    "No model-code gap.",
    "Composable with HACL* verified primitives."
  ],
  "limits": [
    "F* implementation required.",
    "Research maturity.",
    "Manual proof effort."
  ],
  "fit": [
    "Choose DY* when the implementation itself is in F* or can be."
  ],
  "references": [
    [
      "DY* repository",
      "https://github.com/REPROSEC/dolev-yao-star"
    ]
  ],
  "category_name": "Symbolic protocol analysis",
  "page": "https://sorryfree.com/frameworks/dystar/",
  "updated": "2026-09-13"
}