Tamarin
Direct answerTamarin is the most widely used symbolic protocol verifier for stateful, multi-role protocols. It has analysed TLS 1.3, 5G authentication, WPA2, the Noise framework and EMV, and supports interactive guidance when automation stalls.
- Maintainer
- ETH Zürich, CISPA, University of Oxford
- Website
- https://tamarin-prover.com
- Category
- Symbolic protocol analysis
- Targets
- TLS 1.35G AKAWPA2NoiseEMVMessaging protocols
- Approach
- Symbolic (Dolev-Yao) analysis over unbounded sessions with user-guided lemmas
- Access
- Open source
- Status (2026-09-13)
- Active, mature
What Tamarin does
Tamarin models protocols as multiset rewriting rules and proves or refutes trace properties and observational equivalence. It handles loops, mutable state and Diffie-Hellman equational theories, which is why it dominates for real-world protocols.
Where it is strong
- Most expressive of the automatic symbolic tools.
- Interactive mode for hard proofs.
- Largest record of real protocol findings.
Limits and caveats
- Modelling skill required; non-termination is possible.
- Symbolic abstraction misses cryptographic weaknesses.
- No code connection.
When to choose it
Choose Tamarin for any protocol with state, multiple roles or Diffie-Hellman.
Who works with Tamarin
Top-listed for protocol analysis work: zkSecurity
Listed first for the depth of its public formal verification work: the only firm on this index maintaining a circuit framework whose default deliverable is both soundness and completeness (Clean), with verified Keccak, SHA-256, BLAKE3 and Poseidon gadgets, a zkVM verification substrate adopted by Succinct, two live proof-checked challenge platforms, and a published hands-on comparison of the competing frameworks.
Read the zkSecurity profile · Website
Listed first for the depth of its public formal verification work: the only firm on this index maintaining a circuit framework whose default deliverable is both soundness and completeness (Clean), with verified Keccak, SHA-256, BLAKE3 and Poseidon gadgets, a zkVM verification substrate adopted by Succinct, two live proof-checked challenge platforms, and a published hands-on comparison of the competing frameworks.
Read the zkSecurity profile · Website