cpsa 2.0.0 → 2.0.2

raw patch · 62 files changed

+5253/−4895 lines, 62 files

Files

• ChangeLog +21/−0
• NEWS +16/−0
• README +11/−3
• cpsa.cabal +23/−7
• cpsatst +15/−0
• cpsatst.sh +0/−15
• doc/cpsaoverview.pdf binary
• doc/cpsaprimer.pdf binary
• doc/cpsaspec.tex +12/−11
• doc/cpsauser.html +5/−3
• doc/macros.tex +1/−1
• src/CPSA/Basic/Algebra.hs +13/−12
• src/CPSA/DiffieHellman/Algebra.hs +13/−12
• src/CPSA/Graph/Loader.hs +32/−13
• src/CPSA/Lib/Strand.hs +1/−1
• src/cpsa.el +159/−0
• src/cpsa2svg +296/−0
• src/cpsa2svg.sh +0/−296
• src/cpsacgi +17/−0
• src/cpsacgi.py +3/−4
• src/cpsacgi.sh +0/−17
• src/cpsaops.scm +4/−4
• src/httpd_allow_execmem.te +1/−1
• src/index.html +8/−8
• src/preskel +11/−0
• src/preskel.sh +0/−11
• src/sexpr.pl +1/−1
• tst/checktst +10/−0
• tst/checktst.sh +0/−10
• tst/completeness-test.tst +1/−1
• tst/cpsagraphall +12/−0
• tst/cpsagraphall.sh +0/−12
• tst/cpsashapesall +15/−0
• tst/cpsashapesall.sh +0/−15
• tst/dass_simple.tst +1/−1
• tst/denning-sacco.tst +1/−1
• tst/dh.tst +1/−1
• tst/dy.tst +1/−1
• tst/encsig.tst +1/−1
• tst/epmo.tst +1/−1
• tst/epmo_acctnum.tst +1/−1
• tst/ffgg.tst +1/−1
• tst/isoreject.tst +1/−1
• tst/kelly1.tst +1/−1
• tst/kerberos.tst +1/−1
• tst/missing-contraction.tst +1/−1
• tst/neuman-stubblebine-reauth.tst +4419/−4307
• tst/neuman-stubblebine.tst +1/−1
• tst/ns.tst +1/−1
• tst/nsl3.tst +1/−1
• tst/nsl4cm1.tst +1/−1
• tst/nslsk.tst +1/−1
• tst/or.tst +1/−1
• tst/pca.tst +1/−1
• tst/sigenc.tst +1/−1
• tst/sorted_epmo_acctnum.tst +1/−1
• tst/updatetst +19/−0
• tst/updatetst.sh +0/−19
• tst/weird.tst +1/−1
• tst/wmf.tst +1/−1
• tst/woolam.tst +1/−1
• tst/yahalom.tst +90/−87

@@ -1,3 +1,24 @@+2010-03-11  John D. Ramsdell  <ramsdell@gootoo>++	* cpsa.cabal (Version): Tagged as version 2.0.2.++	* src/CPSA/Graph/Loader.hs (itrace): When computing the trace of+	an instance, use the traces comment if it is available.++2010-03-11  John D. Ramsdell  <ramsdell@mitre.org>++	* cpsa.cabal (Version): Tagged as version 2.0.1.++2010-03-07  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/Basic/Algebra.hs (rootName):  Improved renaming+	algorithm used to avoid collisions while printing variables.++2010-03-05  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/Lib/Strand.hs (roleOrigCheck): Added check that+	unique origination position is preserved by inheritance.+ 2010-03-04  John D. Ramsdell  <ramsdell@mitre.org>  	* cpsa.cabal (Version): Tagged as version 2.0.0, the first release

@@ -1,5 +1,21 @@ CPSA NEWS -- history of user-visible changes. +* Changes in version 2.0.2++** Better message terms in graphs+CPSA graph now uses the information in the traces comment when it's+available when printing message terms.++* Changes in version 2.0.1++** Inherited unique origination bug fixed+Added check that unique origination position is preserved by+inheritance.++** Variable printing improved+Improved renaming algorithm used to avoid collisions while printing+variables.+ * Changes in version 2.0.0  ** CPSA is an open source package

@@ -10,6 +10,9 @@  $ runghc Setup.hs configure -fold --ghc --user --prefix="${HOME}" +The Hackage version of the Cabal file needs editing to support GHC+6.8.  Simply remove occurrences of the string "--Hackage".+ QUICK START (Linux)  : To build and install CPSA type:@@ -99,7 +102,7 @@ TEST SUITE  : To run the test suite type:-$ sh cpsatst.sh+$ ./cpsatst  Tests with the .scm extension are expected to complete without error, tests with the .lsp extension are expected to fail, and tests with the@@ -115,8 +118,8 @@  (1) Install the four programs into the CGI bin directory. -(2) Change directory to the src directory, make cpsacgi, and then copy-cpsacgi and cpsacgi.py into the CGI bin directory.+(2) Change directory to the src directory, and copy cpsacgi and+cpsacgi.py into the CGI bin directory.  (3) Copy index.html, ../doc/cpsauser.html, and ../doc/cpsaprimer.pdf into your choice of the web document directory.@@ -131,3 +134,8 @@ make their heap memory executable, has CPSA is written in Haskell, and its runtime puts executable code in its heap.  The policy module is in src/httpd_allow_execmem.te.++KNOWN BUGS++Variable separation in generalization fails to separate variables in+terms of the form (ltk a a).

@@ -1,5 +1,5 @@ Name:			cpsa-Version:		2.0.0+Version:		2.0.2 Maintainer:		ramsdell@mitre.org Cabal-Version:		>= 1.2 License:		BSD3@@ -26,15 +26,15 @@ --   ffgg.scm ns.scm or.scm woolam.scm yahalom.scm -- Data-Dir:	    	doc Extra-Source-Files:-  Makefile ChangeLog README NEWS ghci cpsatst.sh doc/README+  Makefile ChangeLog README NEWS ghci cpsatst doc/README   doc/Makefile doc/macros.tex doc/cpsaprimer.tex doc/bcasyntax.tex   doc/cpsaspec.tex doc/cpsadesign.tex doc/cpsaoverview.tex   doc/cpsadiagrams.mp doc/strands.mp doc/cmstrands.mp doc/carriers.mp   doc/termtree.mp doc/cpsa.bib doc/SDAG.lhs src/index.html-  src/cpsacgi.sh src/cpsacgi.py src/cpsa2svg.sh-  src/httpd_allow_execmem.te src/cpsaops.scm src/preskel.sh-  src/sexpr.pl tst/README tst/Makefile tst/Make.hs tst/checktst.sh-  tst/cpsagraphall.sh tst/cpsashapesall.sh tst/dass.lisp+  src/cpsacgi src/cpsacgi.py src/cpsa2svg src/cpsa.el+  src/httpd_allow_execmem.te src/cpsaops.scm src/preskel+  src/sexpr.pl tst/README tst/Makefile tst/Make.hs tst/checktst+  tst/cpsagraphall tst/cpsashapesall tst/dass.lisp   tst/completeness-test.scm tst/completeness-test.tst   tst/missing-contraction.scm tst/missing-contraction.tst   tst/dass-mod.lisp tst/dass_simple.scm tst/dass_simple.tst@@ -49,7 +49,7 @@   tst/neuman-stubblebine.scm tst/neuman-stubblebine.tst tst/nsl3.scm   tst/nsl3.tst tst/nsl4.lisp tst/nsl5i.lisp tst/nsl5.lisp   tst/nslsk.scm tst/nslsk.tst tst/ns.scm tst/ns.tst tst/or.scm-  tst/or.tst tst/pca.lsp tst/pca.tst tst/tnsl5.lisp tst/updatetst.sh+  tst/or.tst tst/pca.lsp tst/pca.tst tst/tnsl5.lisp tst/updatetst   tst/sigenc.scm tst/sigenc.tst tst/weird.scm tst/weird.tst   tst/wmf.lsp tst/wmf.tst tst/woolam.scm tst/woolam.tst   tst/yahalom.scm tst/yahalom.tst tst/sorted_epmo_acctnum.scm@@ -61,6 +61,10 @@   Description:		Enable use of the parallel construct par   Default:		True +Flag Old+  Description:		Enable support for cabal < 1.6+  Default:		False+ -- Algebra implementations must import CPSA.Lib.CPSA. -- Tools may additionally import CPSA.Lib.Entry. -- No other modules in CPSA.Lib should be imported by applications.@@ -71,6 +75,8 @@   GHC-Options:     -Wall -fno-warn-name-shadowing -fwarn-unused-imports   Hs-Source-Dirs:	src+--Hackage  if flag(old)+--Hackage    Hs-Source-Dirs:	dist/build/autogen   Other-Modules:     Paths_cpsa CPSA.Lib.Vector CPSA.Lib.Utilities CPSA.Lib.Pretty     CPSA.Lib.SExpr CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra@@ -89,6 +95,8 @@   GHC-Options:     -Wall -fno-warn-name-shadowing -fwarn-unused-imports   Hs-Source-Dirs:	src+--Hackage  if flag(old)+--Hackage    Hs-Source-Dirs:	dist/build/autogen   Other-Modules:     Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr     CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol@@ -104,6 +112,8 @@   GHC-Options:     -Wall -fno-warn-name-shadowing -fwarn-unused-imports   Hs-Source-Dirs:	src+--Hackage  if flag(old)+--Hackage    Hs-Source-Dirs:	dist/build/autogen   Other-Modules:     Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr     CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol@@ -116,6 +126,8 @@   GHC-Options:     -Wall -fno-warn-name-shadowing -fwarn-unused-imports   Hs-Source-Dirs:	src+--Hackage  if flag(old)+--Hackage    Hs-Source-Dirs:	dist/build/autogen   Other-Modules:     Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr     CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol@@ -130,6 +142,8 @@   GHC-Options:     -Wall -fno-warn-name-shadowing -fwarn-unused-imports   Hs-Source-Dirs:	src+--Hackage  if flag(old)+--Hackage    Hs-Source-Dirs:	dist/build/autogen   Other-Modules:     Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr     CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol@@ -142,6 +156,8 @@   GHC-Options:     -Wall -fno-warn-name-shadowing -fwarn-unused-imports   Hs-Source-Dirs:	src+--Hackage  if flag(old)+--Hackage    Hs-Source-Dirs:	dist/build/autogen   Other-Modules:     Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr     CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol

@@ -0,0 +1,15 @@+#! /bin/sh++# This script runs the test suite, and then reduces the data for+# inspection.  If make fails, something is very wrong.  If differences+# appear in the output, there might be a problem.++# These scripts in the tst directory might also serve as a template+# for your needs, but probably not.  Look at doc/cpsa.mk first.++# sh cpsashapesall.sh+# sh cpsagraphall.sh++cd tst+make clean+make

@@ -1,15 +0,0 @@-#! /bin/sh--# This script runs the test suite, and then reduces the data for-# inspection.  If make fails, something is very wrong.  If differences-# appear in the output, there might be a problem.--# These scripts in the tst directory might also serve as a template-# for your needs, but probably not.  Look at doc/cpsa.mk first.--# sh cpsashapesall.sh-# sh cpsagraphall.sh--cd tst-make clean-make

binary file changed (75334 → 75334 bytes)

binary file changed (177853 → 177855 bytes)

@@ -884,13 +884,12 @@ $\seq{\cn{exp}(a,\cn{mul}(b,c))}$.  \begin{defn}[Instance Origination Assumptions]-Let $\sigma=\fn{subst}(i)$ for an instance~$i$.  Instance~$i$ inherits-the non-origination assumption~$\sigma(t)$-if~$t\in\fn{rnon}(\fn{role}(i))$, and the variables in~$t$ are in-$\fn{Dom}(\sigma)$.  Instance~$i$ inherits-the unique origination assumption~$\sigma(t)$-if~$t\in\fn{runique}(\fn{role}(i))$, and~$\sigma(t)$ is carried in-an event in $\fn{trace}(i)$.+Let $\sigma=\fn{subst}(i)$ for an instance~$i$, $r=\fn{role}(i)$, and+$h=\fn{height}(i)$.  Instance~$i$ inherits the non-origination+assumption~$\sigma(t)$ if~$t\in\fn{rnon}(r)$, and the variables in~$t$+are in $\fn{Dom}(\sigma)$.  Instance~$i$ inherits the unique+origination assumption~$\sigma(t)$ if~$t\in\fn{runique}(r)$, and $t$+originates in $\fn{rtrace}(r)|_h$. \end{defn}  \begin{defn}[Strand Space~\protect{\cite[Definition~2.2]{ThayerEtal99}}]@@ -958,8 +957,8 @@ \end{defn}  \begin{defn}[Non-Originating]-An atom is non-originating in an execution if the atom occurs in some-trace but is not carried by any trace.+An atom is non-originating in an execution if the atom originates in+no trace, but each of its variables occurs in some trace. \end{defn}  \subsection*{Discussion}@@ -1016,8 +1015,10 @@ \item Each atom in $\fn{unique}(k)$ is carried in the trace of some   instance in $\fn{insts}(k)$. \item Every inherited unique origination assumption is in-  $\fn{unique}(k)$, and each inherited atom originates on the-  inheriting strand.+  $\fn{unique}(k)$, each inherited atom originates on the+  inheriting strand, and the origination position of the inherited+  atom is the same as the origination position of the inherited atom+  in the strand's trace. \item Each atom in $\fn{non}(k)$ is not carried by an event in the   trace of some instance in $\fn{insts}(k)$, and each of   variable that occurs in the atom occurs in some trace.

@@ -3,7 +3,8 @@       "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head>-  <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8" />+  <meta http-equiv="content-type"+  content="application/xhtml+xml; charset=UTF-8" />   <title>CPSA 2.0 User Guide</title>   <meta name="generator" content="Amaya 9.54, see http://www.w3.org/Amaya/" />   <style type="text/css">@@ -293,8 +294,9 @@ transmission at the source of the edge happened before message reception at the destination edge. The edge is solid if the transmitting term is syntactically identical to the receiving term, otherwise the edge is dashed. Thus in an-algebra with a commutative operation <tt>*</tt>, the graphing program draws a-dashed line between <tt>(send (* a b))</tt> and <tt>(recv (* b a))</tt>.</p>+algebra with a commutative operation <tt>*</tt>, the graphing program sometimes+draws a dashed line between <tt>(send (* a b))</tt> and <tt>(recv (* b+a))</tt>.</p>  <p>In the tree drawing, for dead skeletons, the label is red, unless it has been seen before, in which case it is orange. Otherwise the label is green for

@@ -1,5 +1,5 @@ \newcommand{\cpsa}{\textsc{cpsa}}-\newcommand{\version}{2.0.0}+\newcommand{\version}{2.0.1} \newcommand{\cpsacopying}{\begingroup   \renewcommand{\thefootnote}{}\footnotetext{{\copyright} 2009 The     MITRE Corporation.  Permission to copy without fee all or part of

@@ -20,6 +20,7 @@ import Data.Set (Set) import qualified Data.Map as M import Data.Map (Map)+import Data.Char (isDigit) import qualified CPSA.Lib.CPSA as C import CPSA.Lib.CPSA (SExpr(..), Pos, annotation) @@ -1037,7 +1038,7 @@ varContext :: Context -> Term -> Context varContext ctx t =     let x = varId t-        name = idName x in+        name = rootName $ idName x in     if hasId ctx x then         ctx     else@@ -1062,7 +1063,7 @@ genName ctx name =     loop 0     where-      root = rootName name+      root = '-' : reverse name       loop :: Int -> String       loop n =           let name' = revapp root (show n) in@@ -1073,18 +1074,18 @@       revapp [] s = s       revapp (c : cs) s = revapp cs (c : s) --- Returns the reverse of the root rootName :: String -> String-rootName s =-    loop rs+rootName name =+    noHyphen 0 name     where-      rs = reverse s-      loop [] = '-' : rs-      loop (c : cs) =-          if c == '-' then-              c : cs-          else-              loop cs+      noHyphen _ [] = name+      noHyphen i (c : s)+          | c == '-' = hyphen i (i + 1) s+          | otherwise = noHyphen (i + 1) s+      hyphen i _ [] = rootName $ take i name+      hyphen i j (c : s)+          | isDigit c  = hyphen i (j + 1) s+          | otherwise = noHyphen j (c : s)  instance C.Context Term Gen Subst Env Context where     emptyContext = emptyContext

@@ -20,6 +20,7 @@ import Data.Set (Set) import qualified Data.Map as M import Data.Map (Map)+import Data.Char (isDigit) import qualified CPSA.Lib.CPSA as C import CPSA.Lib.CPSA (SExpr(..), Pos, annotation) import qualified CPSA.DiffieHellman.IntLinEq as I@@ -1569,7 +1570,7 @@ varContext :: Context -> Term -> Context varContext ctx t =     let x = varId t-        name = idName x in+        name = rootName $ idName x in     if hasId ctx x then         ctx     else@@ -1594,7 +1595,7 @@ genName ctx name =     loop 0     where-      root = rootName name+      root = '-' : reverse name       loop :: Int -> String       loop n =           let name' = revapp root (show n) in@@ -1605,18 +1606,18 @@       revapp [] s = s       revapp (c : cs) s = revapp cs (c : s) --- Returns the reverse of the root rootName :: String -> String-rootName s =-    loop rs+rootName name =+    noHyphen 0 name     where-      rs = reverse s-      loop [] = '-' : rs-      loop (c : cs) =-          if c == '-' then-              c : cs-          else-              loop cs+      noHyphen _ [] = name+      noHyphen i (c : s)+          | c == '-' = hyphen i (i + 1) s+          | otherwise = noHyphen (i + 1) s+      hyphen i _ [] = rootName $ take i name+      hyphen i j (c : s)+          | isDigit c  = hyphen i (j + 1) s+          | otherwise = noHyphen j (c : s)  instance C.Context Term Gen Subst Env Context where     emptyContext = emptyContext

@@ -172,31 +172,42 @@ loadPreskel s pos ps tag (S _ name : (L _ (S _ "vars" : _)) : xs) =     case lookup name ps of       Nothing -> fail (shows pos $ "Protocol " ++ name ++ " unknown")-      Just p -> loadInsts s pos p tag [] xs+      Just p ->+          do+            alist xs            -- Ensure alist syntax+            let cs = case assoc "traces" xs of+                       Nothing -> []+                       Just cs -> cs+            loadInsts s pos p tag [] cs xs loadPreskel _ pos _ _ _ = fail (shows pos "Malformed skeleton")  loadInsts :: Monad m => SExpr Pos -> Pos -> Protocol -> Int ->-             [Inst] -> [SExpr Pos] -> m Preskel-loadInsts s top p tag insts (L pos (S _ "defstrand" : x) : xs) =+             [Inst] -> [SExpr Pos] -> [SExpr Pos] -> m Preskel+loadInsts s top p tag insts cs (L pos (S _ "defstrand" : x) : xs) =     case x of       S _ role : N _ height : env ->           do-            i <- loadInst pos p role height env-            loadInsts s top p tag (i : insts) xs+            let (c, cs') = case cs of+                      L _ c : cs' -> (c, cs')+                      _ -> ([], [])+            i <- loadInst pos p c role height env+            loadInsts s top p tag (i : insts) cs' xs       _ ->           fail (shows pos "Malformed defstrand")-loadInsts s top p tag insts (L pos (S _ "deflistener" : x) : xs) =+loadInsts s top p tag insts cs (L pos (S _ "deflistener" : x) : xs) =     case x of       [term] ->           let e0 = show (L pos [S pos "recv", term]) in           let e1 = show (L pos [S pos "send", term]) in           let i = Inst { part = "", mapping = "", trace = [e0, e1] } in-          loadInsts s top p tag (i : insts) xs+          let (_, cs') = case cs of+                           L _ c : cs' -> (c, cs')+                           _ -> ([], []) in+          loadInsts s top p tag (i : insts) cs' xs       _ ->           fail (shows pos "Malformed deflistener")-loadInsts s pos p tag revInsts xs =+loadInsts s pos p tag revInsts _ xs =     do-      alist xs                  -- Ensure alist syntax       label <- nassoc "label" xs       parent <- nassoc "parent" xs       seen <- nsassoc "seen" xs@@ -281,9 +292,9 @@  -- Instances -loadInst :: Monad m => Pos -> Protocol -> String -> Int ->-            [SExpr Pos] -> m Inst-loadInst pos p role ht env =+loadInst :: Monad m => Pos -> Protocol -> [SExpr Pos] -> String ->+            Int -> [SExpr Pos] -> m Inst+loadInst pos p c role ht env =     case lookup role (roles p) of       Nothing ->           fail (shows pos $ "Role " ++ role ++ " not found in " ++ name p)@@ -294,10 +305,18 @@                 do                   let mapping = show (L pos env)                   env <- loadMaplet env-                  let evts = map (show . subst env) (take ht trace)+                  let evts = itrace env c (take ht trace)                   return Inst { part = role,                                 mapping = mapping,                                 trace = evts }++-- Compute an instance's trace, using the traces output where possible.+itrace :: [(String, SExpr Pos)] -> [SExpr Pos] -> [SExpr Pos] -> [String]+itrace _ _ [] = []+itrace env (c : cs) (_: rs) =+    show c : itrace env cs rs+itrace env [] (r : rs) =+    show (subst env r) : itrace env [] rs  loadMaplet :: Monad m => [SExpr Pos] -> m [(String, SExpr Pos)] loadMaplet (L _ [S _ name, x] : xs) =

@@ -584,7 +584,7 @@           | pos < height (inst strand) =               case lookup (instantiate (env $ inst strand) ru) (korig k) of                 Nothing -> True     -- role term not mapped-                Just ns -> any (\(s,_)-> sid strand == s) ns+                Just ns -> any (\(s, p)-> sid strand == s && p == pos) ns           | otherwise = True  -- Support for preskeleton transitive closure computation

@@ -0,0 +1,159 @@+;;; Skeleton transformers++;;; Provides+;;;   cpsa-cleanse     -- strips a skeleton of its comment fields+;;;   cpsa-strand-swap -- swaps two strands in a skeleton++(defun cpsa-cleanse (start end)+  "Strips the selected skeleton of comment fields and pretty prints the result."+  (interactive "r")+  (let ((skel (skel start end)))+    (goto-char end)+    (insert "\n\n" (pp-to-string (skel-to-list skel)))+    (message "cleansed")))++;; Construct an internal representation of a skeleton.++(defun skel (start end)+  (let* ((str (buffer-substring start end))+	 (form (car (read-from-string str))))+    (if (not (skelp form))+	(error "form not a skeleton")+      (let* ((two (get-skel-strands form))+	     (strands (car two))+	     (rest (cdr two)))+	(vector (cadr form)		; Protocol+		(cdar (cddr form))	; Vars+		strands			; Strand list+		(lookup 'precedes rest)	; Node orderings+		(lookup 'non-orig rest)	; Non-origination assumptions+		(lookup 'uniq-orig rest)))))) ; Unique origination++;;; Partial check that an S-expression represents a skeleton+(defun skelp (form)+  (and (consp form)+       (eq 'defskeleton (car form))+       (consp (cdr form))+       (symbolp (cadr form))+       (consp (cddr form))+       (eq 'vars (caar (cddr form)))+       (alistp (cdr (cddr form)))))++;;; Is form a list of pairs, where each pair starts with a symbol?+(defun alistp (form)+  (or (null form)+      (and (consp form)+	   (consp (car form))+	   (symbolp (caar form))+	   (alistp (cdr form)))))++;;; Returns the strands and the rest of the form+(defun get-skel-strands (form)+  (let ((strands '())+	(form (cdr (cddr form))))+    (while (and form (or (eq 'defstrand (caar form))+			 (eq 'deflistener (caar form))))+      (setq strands (cons (car form) strands))+      (setq form (cdr form)))+    (cons (reverse strands) form)))++;;; Removes the key on successful lookup+(defun lookup (key alist)+  (let ((result (assq key alist)))+    (if (consp result)+	(cdr result)+      result)))++;; Accessors to the internal representation of a skeleton.++(defun skel-prot (skel)+  (elt skel 0))++(defun skel-vars (skel)+  (elt skel 1))++(defun skel-strands (skel)+  (elt skel 2))++(defun skel-precedes (skel)+  (elt skel 3))++(defun skel-non-orig (skel)+  (elt skel 4))++(defun skel-uniq-orig (skel)+  (elt skel 5))++;; Convert from the internal representation to an S-expression++(defun skel-to-list (skel)+  (let ((l '()))+    (setq l (maybe-add 'uniq-orig (skel-uniq-orig skel) l))+    (setq l (maybe-add 'non-orig (skel-non-orig skel) l))+    (setq l (maybe-add 'precedes (skel-precedes skel) l))+    (setq l (strands-to-list (skel-strands skel) l))+    `(defskeleton ,(skel-prot skel)+       (vars ,@(skel-vars skel))+       ,@l)))++(defun maybe-add (key pair l)+  (if (consp pair)+      (cons (cons key pair) l)+    l))++(defun strands-to-list (strands l)+  (if (consp strands)+      (cons (car strands) (strands-to-list (cdr strands) l))+    l))++;;; Swap two strands++(defun cpsa-strand-swap (start end)+  "Swaps two strands in the selected skeleton and pretty prints the result."+  (interactive "r")+  (let* ((skel (skel start end))+	 (n (length (skel-strands skel)))+	 (s0 (enter-strand n))+	 (s1 (enter-strand n)))+    (aset skel 2 (permute-list s0 s1 (skel-strands skel)))+    (aset skel 3 (permute-precedes s0 s1 (skel-precedes skel)))+    (goto-char end)+    (insert "\n\n" (pp-to-string (skel-to-list skel)))+    (message "strands swapped")))++(defun enter-strand (n)+  (let ((s (read-minibuffer "Enter a strand: ")))+    (if (or (not (numberp s)) (< s 0) (<= n s))+	(error "Expecting a strand number")+      s)))++(defun nats (n)+  (let ((l '()))+    (while (> n 0)+      (setq n (- n 1))+      (setq l (cons n l)))+    l))++(defun permute-list (a b l)+  (let ((swap (lambda (x)+		(cond ((equal x a) b)+		      ((equal x b) a)+		      (t x)))))+    (mapcar (lambda (e)+	      (elt l (funcall swap e)))+	    (nats (length l)))))++(defun permute-precedes (a b l)+  (let ((swap (lambda (x)+		(cond ((equal x a) b)+		      ((equal x b) a)+		      (t x)))))+    (mapcar (lambda (p)+	      (let* ((n0 (car p))+		     (n1 (cadr p))+		     (s0 (funcall swap (car n0)))+		     (s1 (funcall swap (car n1))))+		(list+		 (list s0 (cadr n0))+		 (list s1 (cadr n1)))))+	  l)))

@@ -0,0 +1,296 @@+#! /bin/sh++# Generates an SVG diagram from CPSA preskeletons++# This program converts the preskeletons in the input into an SVG+# diagram using Scheme and the GraphVis program dot.  Terms are+# displayed as tooltips in the diagram.++PROG=`basename "$0"`++usage()+{+  echo "Usage: $PROG [OPTIONS] [FILE]"+  echo+  echo "Options:"+  echo "  -o FILE, --output=FILE"+  echo "         write output to FILE (default is standard output)"+  echo "  -h, --help"+  echo "         display this help and exit"+  echo "  -v, --version"+  echo "         output version information and exit"+}++OPTS=`getopt -o hvo: --long help,version,output: -n "$PROG" -- "$@"`++if [ $? -ne 0 ]+then+  echo+  usage+  exit 1+fi++eval set -- "$OPTS"++for o+do+  case "$o" in+    -h|--help)+      usage+      exit 0;;+    -v|--version)+      echo $PROG 1.0+      exit 0;;+    -o|--output)+      output="$2"+      shift 2;;+    --)+      shift+      break;;+  esac+done++SCRIPT='+;;; Converts the preskeletons in the input into GraphViz dot format.+;;; Terms are displayed as tooltips, so this output is usually+;;; converted to SVG.++;;; This program expects its input to be generated by another program,+;;; and therefore does not adequately check its input.++;;; The program reads from the standard input and writes to the+;;; standard output.++;;; The main routine+(define (main)+  (let ((input (get)))			 ; Read input+    (show-all (car input) (cdr input)))) ; Process in++;;; Get the list of preskeletons and the protocols as an alist+(define (get)+  (let loop ((prots '\''()) (skels '\''()))+    (let ((x (read)))+      (cond ((eof-object? x)+	     (cons (reverse prots) (reverse skels)))+	    ((or (not (pair? x))+		 (not (symbol? (car x)))+		 (not (pair? (cdr x)))+		 (not (symbol? (cadr x))))+	     (loop prots skels))+	    ((equal? '\''defprotocol (car x))+	     (loop (cons (cons (cadr x) x) prots) skels))+	    ((equal? '\''defskeleton (car x))+	     (loop prots (cons x skels)))+	    (else (loop prots skels))))))++(define (show-all prots skels)+  (display "digraph cpsa {")+  (newline)				; t is a tag number+  (let loop ((t 0) (skels skels))	; used for labeling+    (cond ((pair? skels)+	   (let ((prot (assoc (cadar skels) prots)))+	     (if prot (show-skel t (cdr prot) (car skels)))+	     (loop (+ t 1) (cdr skels))))+	  (else+	   (display "}")+	   (newline)))))++;;; Print graph header+(define (show-skel tag prot skel)+  (let* ((x (assoc '\''label (cddr skel)))	; Use value of the+	 (label (if x (cadr x) tag))	; label attribute+	 (y (assoc '\''parent (cddr skel))) ; when it appears+	 (parent (and y (cadr y)))+	 (name (cadr prot)))+    (newline)+    (display-outline label parent)+    (display "subgraph cluster")+    (display label)+    (display " {")+    (newline)+    (display "  label = \"")+    (display name)+    (display " ")+    (display label)+    (display "\";")+    (newline)+    (show-strands label 0 (map extract-trace (cdddr prot)) (cdddr skel))))++(define (display-outline label parent)+  (display "c")+  (display label)+  (display " [label = \"")+  (display label)+  (display "\"]; ")+  (newline)+  (cond (parent+	 (display "c")+	 (display parent)+	 (display " -> c")+	 (display label)+	 (display ";")+	 (newline))))++;;; Used to make an alist of role name and their trace+(define (extract-trace role)+  (cons (cadr role) (cdar (cdddr role))))++;;; Print the strands+(define (show-strands label s traces strands )+  (cond ((equal? '\''defstrand (caar strands))+	 (show-strand label s (cdar strands) traces (cdr strands)))+	((equal? '\''deflistener (caar strands))+	 (show-listener label s (cadar strands) traces (cdr strands)))+        (else+	 (let ((result (assoc '\''precedes strands)))+	   (show-order label (if (pair? result) (cdr result) '\''()))))))++;;; Show a non-listener strand+(define (show-strand label s strand traces strands)+  (let ((role (car strand))+	(height (cadr strand))+	(env (cddr strand)))+    (show-cluster label s)+    (display "    label = \"")		; Use role as+    (display role)			; cluster label+    (display "\";")+    (newline)+    (show-strand-nodes label s (assoc role traces) height env)+    (show-strand-edges label s height)+    (display "  }")+    (newline))+  (show-strands label (+ s 1) traces strands))++(define (show-cluster label s)+  (newline)+  (display "  subgraph cluster")+  (display label)+  (display "_")+  (display s)+  (display " {")+  (newline)				; Use strand for all+  (display "    node [label = \"")	; node labels in this+  (display s)				; cluster+  (display "\"];")+  (newline))++(define (show-strand-nodes label s trace height env)+  (if (not trace)+      (error "Bad role name")+      (let loop ((n 0) (trace (cdr trace)))+	(cond ((< n height)+	       (show-node label s n (subst (car trace) env))+	       (loop (+ n 1) (cdr trace)))))))++;;; Show a node with the term as a tooltip+(define (show-node label s n term)+  (display "    ")+  (display-node label s n)+  (display " [tooltip = \"")+  (show-term term)+  (display "\"];")+  (newline))++;;; Writes a term while quoting strings properly+(define (show-term term)+  (define (show-term-list terms)+    (cond ((pair? terms)+	   (display " ")+	   (show-term (car terms))+	   (show-term-list (cdr terms)))+	  (else+	   (display ")"))))+  (cond ((string? term)+	 (display "\"")+	 (display term)+	 (display "\""))+	((pair? term)+	 (display "(")+	 (show-term (car term))+	 (show-term-list (cdr term)))+	(else+	 (display term))))++(define (display-node label s n)+  (display "l")+  (display label)+  (display "s")+  (display s)+  (display "n")+  (display n))++;;; Substitute symbols for values in the given environment+(define (subst exp env)+  (define (substitute exp)+    (cond ((symbol? exp)+	   (let ((alist (assoc exp env)))+	     (if alist+		 (cadr alist)+		 exp)))+	  ((pair? exp)+	   (cons (car exp) (map substitute (cdr exp))))+	  (else exp)))+  (substitute exp))++(define (show-strand-edges label s height)+  (display "    ")+  (display-node label s 0)+  (let loop ((n 1))+    (cond ((>= n height)+	   (display ";")+	   (newline))+	  (else+	   (display " -> ")+	   (display-node label s n)+	   (loop (+ n 1))))))++(define (show-listener label s term traces strands)+  (show-cluster label s)+  (display "    label = \"\";")+  (newline)+  (show-node label s 0 (list '\''recv term))+  (display "  }")+  (newline)+  (show-strands label (+ s 1) traces strands))++(define (show-order label orderings)+  (cond ((pair? orderings)+	 (let ((hd (caar orderings))+	       (tl (cadar orderings)))+	   (display "  ")+	   (display-node label (car hd) (cadr hd))+	   (display " -> ")+	   (display-node label (car tl) (cadr tl))+	   (display ";")+	   (newline)+	   (show-order label (cdr orderings))))+	(else+	 (display "}")+	 (newline))))++(main)+'++case $# in+  0)+    if [ -z "$output" ]+    then+      guile -c "$SCRIPT" | dot -Tsvg+    else+      guile -c "$SCRIPT" | dot -Tsvg -o "$output"+    fi+    break;;+  1)+    if [ -z "$output" ]+    then+      guile -c "$SCRIPT" < "$1" | dot -Tsvg+    else+      guile -c "$SCRIPT" < "$1" | dot -Tsvg -o "$output"+    fi+    break;;+  *)+    echo Too many input files+    echo+    usage+    exit 1;;+esac

@@ -1,296 +0,0 @@-#! /bin/sh--# Generates an SVG diagram from CPSA preskeletons--# This program converts the preskeletons in the input into an SVG-# diagram using Scheme and the GraphVis program dot.  Terms are-# displayed as tooltips in the diagram.--PROG=`basename "$0"`--usage()-{-  echo "Usage: $PROG [OPTIONS] [FILE]"-  echo-  echo "Options:"-  echo "  -o FILE, --output=FILE"-  echo "         write output to FILE (default is standard output)"-  echo "  -h, --help"-  echo "         display this help and exit"-  echo "  -v, --version"-  echo "         output version information and exit"-}--OPTS=`getopt -o hvo: --long help,version,output: -n "$PROG" -- "$@"`--if [ $? -ne 0 ]-then-  echo-  usage-  exit 1-fi--eval set -- "$OPTS"--for o-do-  case "$o" in-    -h|--help)-      usage-      exit 0;;-    -v|--version)-      echo $PROG 1.0-      exit 0;;-    -o|--output)-      output="$2"-      shift 2;;-    --)-      shift-      break;;-  esac-done--SCRIPT='-;;; Converts the preskeletons in the input into GraphViz dot format.-;;; Terms are displayed as tooltips, so this output is usually-;;; converted to SVG.--;;; This program expects its input to be generated by another program,-;;; and therefore does not adequately check its input.--;;; The program reads from the standard input and writes to the-;;; standard output.--;;; The main routine-(define (main)-  (let ((input (get)))			 ; Read input-    (show-all (car input) (cdr input)))) ; Process in--;;; Get the list of preskeletons and the protocols as an alist-(define (get)-  (let loop ((prots '\''()) (skels '\''()))-    (let ((x (read)))-      (cond ((eof-object? x)-	     (cons (reverse prots) (reverse skels)))-	    ((or (not (pair? x))-		 (not (symbol? (car x)))-		 (not (pair? (cdr x)))-		 (not (symbol? (cadr x))))-	     (loop prots skels))-	    ((equal? '\''defprotocol (car x))-	     (loop (cons (cons (cadr x) x) prots) skels))-	    ((equal? '\''defskeleton (car x))-	     (loop prots (cons x skels)))-	    (else (loop prots skels))))))--(define (show-all prots skels)-  (display "digraph cpsa {")-  (newline)				; t is a tag number-  (let loop ((t 0) (skels skels))	; used for labeling-    (cond ((pair? skels)-	   (let ((prot (assoc (cadar skels) prots)))-	     (if prot (show-skel t (cdr prot) (car skels)))-	     (loop (+ t 1) (cdr skels))))-	  (else-	   (display "}")-	   (newline)))))-  -;;; Print graph header-(define (show-skel tag prot skel)-  (let* ((x (assoc '\''label (cddr skel)))	; Use value of the -	 (label (if x (cadr x) tag))	; label attribute-	 (y (assoc '\''parent (cddr skel))) ; when it appears-	 (parent (and y (cadr y)))-	 (name (cadr prot)))		-    (newline)-    (display-outline label parent)-    (display "subgraph cluster")-    (display label)-    (display " {")-    (newline)-    (display "  label = \"")-    (display name)-    (display " ")-    (display label)-    (display "\";")-    (newline)-    (show-strands label 0 (map extract-trace (cdddr prot)) (cdddr skel))))--(define (display-outline label parent)-  (display "c")-  (display label)-  (display " [label = \"")-  (display label)-  (display "\"]; ")-  (newline)-  (cond (parent -	 (display "c")-	 (display parent)-	 (display " -> c")-	 (display label)-	 (display ";")-	 (newline))))-	 -;;; Used to make an alist of role name and their trace-(define (extract-trace role)-  (cons (cadr role) (cdar (cdddr role))))--;;; Print the strands-(define (show-strands label s traces strands )-  (cond ((equal? '\''defstrand (caar strands))-	 (show-strand label s (cdar strands) traces (cdr strands)))-	((equal? '\''deflistener (caar strands))-	 (show-listener label s (cadar strands) traces (cdr strands)))-        (else-	 (let ((result (assoc '\''precedes strands)))-	   (show-order label (if (pair? result) (cdr result) '\''()))))))--;;; Show a non-listener strand-(define (show-strand label s strand traces strands)-  (let ((role (car strand))-	(height (cadr strand))-	(env (cddr strand)))-    (show-cluster label s)-    (display "    label = \"")		; Use role as-    (display role)			; cluster label-    (display "\";")-    (newline)-    (show-strand-nodes label s (assoc role traces) height env)-    (show-strand-edges label s height)-    (display "  }")-    (newline))-  (show-strands label (+ s 1) traces strands))--(define (show-cluster label s)-  (newline)-  (display "  subgraph cluster")-  (display label)-  (display "_")-  (display s)-  (display " {")-  (newline)				; Use strand for all-  (display "    node [label = \"")	; node labels in this-  (display s)				; cluster-  (display "\"];")-  (newline))--(define (show-strand-nodes label s trace height env)-  (if (not trace)-      (error "Bad role name")-      (let loop ((n 0) (trace (cdr trace)))-	(cond ((< n height)-	       (show-node label s n (subst (car trace) env))-	       (loop (+ n 1) (cdr trace)))))))--;;; Show a node with the term as a tooltip-(define (show-node label s n term)-  (display "    ")-  (display-node label s n)-  (display " [tooltip = \"")-  (show-term term)-  (display "\"];")-  (newline))--;;; Writes a term while quoting strings properly-(define (show-term term)-  (define (show-term-list terms)-    (cond ((pair? terms)-	   (display " ")-	   (show-term (car terms))-	   (show-term-list (cdr terms)))-	  (else-	   (display ")"))))-  (cond ((string? term)-	 (display "\"")-	 (display term)-	 (display "\""))-	((pair? term)-	 (display "(")-	 (show-term (car term))-	 (show-term-list (cdr term)))-	(else-	 (display term))))--(define (display-node label s n)-  (display "l")-  (display label)-  (display "s")-  (display s)-  (display "n")-  (display n))--;;; Substitute symbols for values in the given environment-(define (subst exp env)-  (define (substitute exp)-    (cond ((symbol? exp)-	   (let ((alist (assoc exp env)))-	     (if alist-		 (cadr alist)-		 exp)))-	  ((pair? exp)-	   (cons (car exp) (map substitute (cdr exp))))-	  (else exp)))-  (substitute exp))--(define (show-strand-edges label s height)-  (display "    ")-  (display-node label s 0)-  (let loop ((n 1))-    (cond ((>= n height)-	   (display ";")-	   (newline))-	  (else-	   (display " -> ")-	   (display-node label s n)-	   (loop (+ n 1))))))--(define (show-listener label s term traces strands)-  (show-cluster label s)-  (display "    label = \"\";")-  (newline)-  (show-node label s 0 (list '\''recv term))-  (display "  }")-  (newline)-  (show-strands label (+ s 1) traces strands))--(define (show-order label orderings)-  (cond ((pair? orderings)-	 (let ((hd (caar orderings))-	       (tl (cadar orderings)))-	   (display "  ")-	   (display-node label (car hd) (cadr hd))-	   (display " -> ")-	   (display-node label (car tl) (cadr tl))-	   (display ";")-	   (newline)-	   (show-order label (cdr orderings))))-	(else -	 (display "}")-	 (newline))))--(main)-'--case $# in-  0)-    if [ -z "$output" ]-    then -      guile -c "$SCRIPT" | dot -Tsvg-    else-      guile -c "$SCRIPT" | dot -Tsvg -o "$output"-    fi-    break;;-  1) -    if [ -z "$output" ]-    then -      guile -c "$SCRIPT" < "$1" | dot -Tsvg-    else-      guile -c "$SCRIPT" < "$1" | dot -Tsvg -o "$output"-    fi-    break;;-  *) -    echo Too many input files-    echo-    usage-    exit 1;;-esac

@@ -0,0 +1,17 @@+#! /bin/sh+if test -e /tmp/cpsacgi+then+  echo Content-type: text/plain+  echo+  echo Server busy+  exit 0+fi++trap '/bin/rm -f /tmp/cpsacgi; exit 1' 1 2 3 4 6 8 9 11 13 14 15+echo $! > /tmp/cpsacgi++# Run unlimited version of the script+/usr/bin/python cpsacgi.py+STATUS=$?+/bin/rm -f /tmp/cpsacgi+exit ${STATUS}

@@ -1,6 +1,6 @@ #! /usr/bin/python -"""Warning: this CGI script is for deployment in friendly +"""Warning: this CGI script is for deployment in friendly environments only!"""  import cgi@@ -28,7 +28,7 @@     elif form.has_key('shapes xml'):         resp = xml(shapes_xml_cmd, form['shapes xml'], None)     elif form.has_key('shapes annotations xml'):-        resp = xml(shapes_annotations_xml_cmd, +        resp = xml(shapes_annotations_xml_cmd,                    form['shapes annotations xml'], None)     elif form.has_key('graph'):         resp = graph(graph_cmd, form['graph'], None)@@ -39,7 +39,7 @@     elif form.has_key('cpsa shapes'):         resp = cpsa(shapes_cmd, form['cpsa shapes'])     elif form.has_key('cpsa shapes annotations'):-        resp = cpsa(shapes_annotations_cmd, +        resp = cpsa(shapes_annotations_cmd,                     form['cpsa shapes annotations'])     elif form.has_key('cpsa xml'):         resp = cpsa_xml(xml_cmd, form['cpsa xml'])@@ -209,7 +209,6 @@     if out.find("cpsa") >= 0:         return 'Content-Type: text/plain\n\nServer busy'     return False-      READ_BOUND = 2 << 20 

@@ -1,17 +0,0 @@-#! /bin/sh-if test -e /tmp/cpsacgi-then-  echo Content-type: text/plain-  echo-  echo Server busy-  exit 0-fi- -trap '/bin/rm -f /tmp/cpsacgi; exit 1' 1 2 3 4 6 8 9 11 13 14 15-echo $! > /tmp/cpsacgi--# Run unlimited version of the script-/usr/bin/python cpsacgi.py-STATUS=$?-/bin/rm -f /tmp/cpsacgi-exit ${STATUS}

@@ -10,7 +10,7 @@     (cond (op (write op) (newline)))))  ;;; Is form a defskeleton that can be used with assq?- + (define (skel? form)   (and (pair? form)        (eq? 'defskeleton (car form))@@ -52,8 +52,8 @@ ;;; that is a non-empty string that does not start with hyphen.  (define (file-description? file)-   (or (not file) -       (and (> (string-length file) 0) +   (or (not file)+       (and (> (string-length file) 0) 	    (not (char=? #\- (string-ref file 0))))))  ;;; After command-line processing, this routine opens files as needed.@@ -63,7 +63,7 @@ 	 (display-error "bad input file name")) 	((not (file-description? output)) 	 (display-error "bad output file name"))-	(input +	(input 	 (with-input-from-file input 	   (lambda () 	     (if output

@@ -17,7 +17,7 @@ ')  tunable_policy(`httpd_allow_execmem',`-	# Allow making anonymous memory executable, e.g. +	# Allow making anonymous memory executable, e.g. 	# for runtime-code generation or executable stack. 	allow httpd_sys_script_t self:process execmem; ')

@@ -19,49 +19,49 @@ <h2>CPSA Shapes as XML</h2>  <form action="/cgi-bin/cpsacgi" method="post" enctype="multipart/form-data">-  <input type="file" name="cpsa shapes xml" /> +  <input type="file" name="cpsa shapes xml" />   <input type="submit" value="Send" /> </form>  <h2>CPSA as XML</h2>  <form action="/cgi-bin/cpsacgi" method="post" enctype="multipart/form-data">-  <input type="file" name="cpsa xml" /> +  <input type="file" name="cpsa xml" />   <input type="submit" value="Send" /> </form>  <h2>Annotated CPSA Shapes as XML</h2>  <form action="/cgi-bin/cpsacgi" method="post" enctype="multipart/form-data">-  <input type="file" name="cpsa shapes annotations xml" /> +  <input type="file" name="cpsa shapes annotations xml" />   <input type="submit" value="Send" /> </form>  <h2>CPSA Shapes and Graph</h2>  <form action="/cgi-bin/cpsacgi" method="post" enctype="multipart/form-data">-  <input type="file" name="cpsa shapes graph" /> +  <input type="file" name="cpsa shapes graph" />   <input type="submit" value="Send" /> </form>  <h2>CPSA and Graph</h2>  <form action="/cgi-bin/cpsacgi" method="post" enctype="multipart/form-data">-  <input type="file" name="cpsa graph" /> +  <input type="file" name="cpsa graph" />   <input type="submit" value="Send" /> </form>  <h2>CPSA Shapes as Text</h2>  <form action="/cgi-bin/cpsacgi" method="post" enctype="multipart/form-data">-  <input type="file" name="cpsa shapes" /> +  <input type="file" name="cpsa shapes" />   <input type="submit" value="Send" /> </form>  <h2>CPSA as Text</h2>  <form action="/cgi-bin/cpsacgi" method="post" enctype="multipart/form-data">-  <input type="file" name="cpsa" /> +  <input type="file" name="cpsa" />   <input type="submit" value="Send" /> </form>  <h2>Annotated CPSA Shapes as Text</h2>  <form action="/cgi-bin/cpsacgi" method="post" enctype="multipart/form-data">-  <input type="file" name="cpsa shapes annotations" /> +  <input type="file" name="cpsa shapes annotations" />   <input type="submit" value="Send" /> </form> </body> </html>

@@ -0,0 +1,11 @@+#! /bin/sh+# replaces defpreskeleton with defskeleton++for i+do+  if test -f "$i" -a -w "$i"+  then+    mv "$i" "$i".bak+    sed 's/defpreskeleton/defskeleton/g' "$i".bak > "$i"+  fi+done

@@ -1,11 +0,0 @@-#! /bin/sh-# replaces defpreskeleton with defskeleton--for i-do-  if test -f "$i" -a -w "$i"-  then-    mv "$i" "$i".bak-    sed 's/defpreskeleton/defskeleton/g' "$i".bak > "$i" -  fi-done

@@ -137,7 +137,7 @@ 	{ sexpr_token(C, space) }.  sexpr_white_space -->-	sexpr_semicolon, +	sexpr_semicolon, 	!, 	sexpr_comment. 

@@ -0,0 +1,10 @@+#! /bin/sh++for f in *.tst+do+  b=`basename $f .tst`+  if test ! -f $b.scm -a ! -f $b.lsp+  then+    echo $f+  fi+done

@@ -1,10 +0,0 @@-#! /bin/sh--for f in *.tst-do-  b=`basename $f .tst`-  if test ! -f $b.scm -a ! -f $b.lsp-  then-    echo $f-  fi-done

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol completeness-test basic

@@ -0,0 +1,12 @@+#! /bin/sh++# Graph all test output.++PROG=../dist/build/cpsagraph/cpsagraph++for i in *.txt+do+  o=`basename $i .txt`.svg+  echo $PROG -o $o $i+  $PROG -o $o $i+done

@@ -1,12 +0,0 @@-#! /bin/sh--# Graph all test output.--PROG=../dist/build/cpsagraph/cpsagraph--for i in *.txt-do-  o=`basename $i .txt`.svg-  echo $PROG -o $o $i-  $PROG -o $o $i-done

@@ -0,0 +1,15 @@+#! /bin/sh++# Find the shapes associated with all test output.++PROG=../dist/build/cpsashapes/cpsashapes++for i in *.txt+do+  if echo $i | grep -v shapes > /dev/null+  then+    o=`basename $i .txt`_shapes.txt+    echo $PROG -o $o $i+    $PROG -o $o $i+  fi+done

@@ -1,15 +0,0 @@-#! /bin/sh--# Find the shapes associated with all test output.--PROG=../dist/build/cpsashapes/cpsashapes--for i in *.txt-do-  if echo $i | grep -v shapes > /dev/null-  then-    o=`basename $i .txt`_shapes.txt-    echo $PROG -o $o $i-    $PROG -o $o $i-  fi-done

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol dass basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol denning-sacco basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol dhke diffie-hellman

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol dy basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol mult-keys-enc-sig basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol epmo basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol epmo_acctnum basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol ffgg basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol isoreject basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol kelly1 basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol kerberos basic

@@ -1,4 +1,4 @@-(comment "CPSA 2.0.0")+(comment "CPSA 2.0.2") (comment "All input read")  (defprotocol missing-contraction basic

@@ -1,4310 +1,4422 @@-(comment "CPSA 2.0.0")-(comment "All input read")--(defprotocol neuman-stubblebine basic-  (defrole init-    (vars (a b ks name) (ra rb text) (k skey) (tb text))-    (trace (send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (defrole resp-    (vars (a b ks name) (ra rb text) (k skey) (tb text))-    (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (defrole init-reauth-    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))-    (trace (recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))-  (defrole resp-reauth-    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))-    (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))-  (defrole keyserver-    (vars (a b ks name) (ra rb text) (k skey) (tb text))-    (trace (recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    (uniq-orig k)))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))-  (label 0)-  (unrealized (0 2) (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((2 1) (0 2)) ((2 1) (1 0)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb-0 (ltk b ks)) (1 0))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0))))-  (label 1)-  (parent 0)-  (unrealized (0 2) (1 2) (2 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp 2)-    (enc a ra-0 tb-0 (ltk b ks)) (2 0))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))))-  (label 2)-  (parent 1)-  (unrealized (0 2) (1 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb-prime k)-    (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k)))))-  (label 3)-  (parent 2)-  (unrealized (0 2) (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-1)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k))))-  (label 4)-  (parent 2)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-2 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb-1)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))-      (send (cat rb-2 (enc rb-prime k)))))-  (label 5)-  (parent 2)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (deflistener k)-  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv k) (send k)))-  (label 6)-  (parent 2)-  (unrealized (0 2) (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-1 tb-0)) k-    (4 1) (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))-  (label 7)-  (parent 3)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k))))-  (label 8)-  (parent 4)-  (unrealized (0 2) (4 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k)))))-  (label 9)-  (parent 5)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 10)-  (parent 7)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-2) (rb ra-1) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-1 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a-0 ra-2))-      (recv-        (cat (enc b-0 ra-2 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-1))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-1 k)))))-  (label 11)-  (parent 8)-  (unrealized (0 2) (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-1)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc ra-1 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k))))-  (label 12)-  (parent 8)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 rb-2 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb-1)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc ra-1 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-1))-      (send (cat rb-2 (enc ra-1 k)))))-  (label 13)-  (parent 8)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-1 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv k) (send k)))-  (label 14)-  (parent 8)-  (unrealized (0 2) (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k)))))-  (label 15)-  (parent 9)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 16)-  (parent 10)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k))))-  (label 17)-  (parent 10)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-2) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-2 (enc rb k)))))-  (label 18)-  (parent 10)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))-    ((4 2) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv k) (send k)))-  (label 19)-  (parent 10)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb-0) (a a) (b b) (ks ks)-    (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-2 ra-0) (tb-1 tb-0)) k-    (5 1) (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-1)) (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-1 k)))))-  (label 20)-  (parent 11)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k))))-  (label 21)-  (parent 12)-  (unrealized (0 2) (5 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k)))))-  (label 22)-  (parent 13)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 23)-  (parent 15)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k))))-  (label 24)-  (parent 15)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 rb-3 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-3) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-3 (enc rb k)))))-  (label 25)-  (parent 15)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))-    ((4 1) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k)))) ((recv k) (send k)))-  (label 26)-  (parent 15)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (5 1)-    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 27)-  (parent 16)-  (unrealized)-  (shape))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k))))-  (label 28)-  (parent 17)-  (unrealized (5 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-2 (enc rb k)))))-  (label 29)-  (parent 18)-  (unrealized)-  (shape)-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k)))))-  (label 30)-  (parent 20)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 tb-1-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-3) (rb ra-2) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-2 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((send (cat a-0 ra-3))-      (recv-        (cat (enc b-0 ra-3 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-2))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-2 k)))))-  (label 31)-  (parent 21)-  (unrealized (0 2) (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 tb-1-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-3) (rb-prime ra-2) (tb tb-1)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc ra-2 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-3))-      (recv (cat ra-2 (enc ra-3 k))) (send (enc ra-2 k))))-  (label 32)-  (parent 21)-  (unrealized (0 2) (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 rb-2 tb-1-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-2) (rb-prime rb-2) (tb tb-1)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc ra-2 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-2))-      (send (cat rb-2 (enc ra-2 k)))))-  (label 33)-  (parent 21)-  (unrealized (0 2) (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-2 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv k) (send k)))-  (label 34)-  (parent 21)-  (unrealized (0 2) (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k)))))-  (label 35)-  (parent 22)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (5 1)-    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 36)-  (parent 23)-  (unrealized)-  (shape)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k))))-  (label 37)-  (parent 24)-  (unrealized (5 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 rb-3 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-3) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-3 (enc rb k)))))-  (label 38)-  (parent 25)-  (unrealized)-  (shape)-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-2) (rb ra-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((send (cat a-0 ra-2))-      (recv-        (cat (enc b-0 ra-2 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-1 k)))))-  (label 39)-  (parent 28)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc ra-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k))))-  (label 40)-  (parent 28)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc ra-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-1))-      (send (cat rb-2 (enc ra-1 k)))))-  (label 41)-  (parent 28)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 42)-  (parent 28)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation collapsed 3 0)-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-1 (enc rb k)))))-  (label 43)-  (parent 29)-  (unrealized)-  (shape)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation collapsed 5 1)-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 44)-  (parent 29)-  (seen 66)-  (unrealized)-  (shape)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-2) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((send (cat a-0 ra-2))-      (recv-        (cat (enc b-0 ra-2 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 45)-  (parent 30)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-2))-      (recv (cat rb (enc ra-2 k))) (send (enc rb k))))-  (label 46)-  (parent 30)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-2) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-2 (enc rb k)))))-  (label 47)-  (parent 30)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))-    ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((recv k) (send k)))-  (label 48)-  (parent 30)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-2) (tb tb-0) (a a) (b b) (ks ks)-    (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-3 ra-0) (tb-1 tb-0)) k-    (6 1) (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-2)) (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-2 k)))))-  (label 49)-  (parent 31)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-3) (rb-prime ra-2) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-3))-      (recv (cat ra-2 (enc ra-3 k))) (send (enc ra-2 k))))-  (label 50)-  (parent 32)-  (unrealized (0 2) (6 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-2) (rb-prime rb-2) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (send (cat rb-2 (enc ra-2 k)))))-  (label 51)-  (parent 33)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 ra-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-2) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k))))-    ((send (cat a-0 ra-2))-      (recv-        (cat (enc b-0 ra-2 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 52)-  (parent 35)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 ra-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-2))-      (recv (cat rb (enc ra-2 k))) (send (enc rb k))))-  (label 53)-  (parent 35)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 rb-3 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-3) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-3 (enc rb k)))))-  (label 54)-  (parent 35)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))-    ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k)))) ((recv k) (send k)))-  (label 55)-  (parent 35)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation collapsed 3 0)-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-1 (enc rb-prime k))))-    ((send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 56)-  (parent 36)-  (unrealized)-  (shape))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 ra-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-2) (rb ra-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((send (cat a-0 ra-2))-      (recv-        (cat (enc b-0 ra-2 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-1 k)))))-  (label 57)-  (parent 37)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 ra-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc ra-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k))))-  (label 58)-  (parent 37)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 rb-3 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-3) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc ra-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-1))-      (send (cat rb-3 (enc ra-1 k)))))-  (label 59)-  (parent 37)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 60)-  (parent 37)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb rb-0 rb-1 rb-2 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation collapsed 3 0)-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-1 (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-2 (enc rb k)))))-  (label 61)-  (parent 38)-  (unrealized)-  (shape)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation collapsed 5 1)-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-1 (enc rb-prime k)))))-  (label 62)-  (parent 38)-  (seen 82)-  (unrealized)-  (shape)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-2 ra-0) (tb-0 tb)) k (6 1)-    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k)))))-  (label 63)-  (parent 39)-  (unrealized)-  (shape))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k))))-  (label 64)-  (parent 40)-  (unrealized (6 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k)))))-  (label 65)-  (parent 41)-  (unrealized)-  (shape)-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra ra-prime rb-prime tb rb text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0))-    ((3 0) (0 0)) ((3 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation collapsed 4 1)-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 66)-  (parent 43)-  (unrealized)-  (shape))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-2 ra-0) (tb-0 tb)) k (6 1)-    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 67)-  (parent 45)-  (unrealized)-  (shape))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat rb (enc ra-2 k))) (send (enc rb k))))-  (label 68)-  (parent 46)-  (unrealized (6 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-2 (enc rb k)))))-  (label 69)-  (parent 47)-  (unrealized)-  (shape)-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-2) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-2))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-2 k)))))-  (label 70)-  (parent 49)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(comment "Strand bound exceeded--aborting run")--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 ra-4-      tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-3) (rb-prime ra-2) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-4) (rb ra-3) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-3 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-3))-      (recv (cat ra-2 (enc ra-3 k))) (send (enc ra-2 k)))-    ((send (cat a-0 ra-4))-      (recv-        (cat (enc b-0 ra-4 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-3))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-3 k)))))-  (label 71)-  (parent 50)-  (unrealized (0 2) (7 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 ra-4-      tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-3) (rb-prime ra-2) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-4) (rb-prime ra-3) (tb tb-1)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc ra-3 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-3))-      (recv (cat ra-2 (enc ra-3 k))) (send (enc ra-2 k)))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-4))-      (recv (cat ra-3 (enc ra-4 k))) (send (enc ra-3 k))))-  (label 72)-  (parent 50)-  (unrealized (0 2) (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 rb-2-      tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-3) (rb-prime ra-2) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-3) (rb-prime rb-2) (tb tb-1)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc ra-3 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-3))-      (recv (cat ra-2 (enc ra-3 k))) (send (enc ra-2 k)))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-3))-      (send (cat rb-2 (enc ra-3 k)))))-  (label 73)-  (parent 50)-  (unrealized (0 2) (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-3) (rb-prime ra-2) (tb tb-0)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-3 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-3))-      (recv (cat ra-2 (enc ra-3 k))) (send (enc ra-2 k)))-    ((recv k) (send k)))-  (label 74)-  (parent 50)-  (unrealized (0 2) (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-2) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-2))-      (send (cat rb-2 (enc ra-2 k)))))-  (label 75)-  (parent 51)-  (unrealized (0 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-2 ra-0) (tb-0 tb)) k (6 1)-    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 76)-  (parent 52)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat rb (enc ra-2 k))) (send (enc rb k))))-  (label 77)-  (parent 53)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 rb-2 rb-3 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-2) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-3) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-2 (enc ra-1 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-3 (enc rb k)))))-  (label 78)-  (parent 54)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-2 ra-0) (tb-0 tb)) k (6 1)-    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k)))))-  (label 79)-  (parent 57)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k))))-  (label 80)-  (parent 58)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-2 ra-1 rb-3 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-2) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-1) (rb-prime rb-3) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-2 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-1))-      (send (cat rb-3 (enc ra-1 k)))))-  (label 81)-  (parent 59)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra ra-prime rb-prime tb rb rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0))-    ((3 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation collapsed 4 1)-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-0 (enc rb-prime k)))))-  (label 82)-  (parent 61)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-3) (rb ra-2) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 2) (1 2))-    ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((send (cat a-0 ra-3))-      (recv-        (cat (enc b-0 ra-3 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-2))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-2 k)))))-  (label 83)-  (parent 64)-  (unrealized (7 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-3) (rb-prime ra-2) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))-    ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc ra-2 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-3))-      (recv (cat ra-2 (enc ra-3 k))) (send (enc ra-2 k))))-  (label 84)-  (parent 64)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 rb-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-2) (rb-prime rb-2) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))-    ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc ra-2 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-2))-      (send (cat rb-2 (enc ra-2 k)))))-  (label 85)-  (parent 64)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))-    ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb (enc ra-1 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((recv k) (send k)))-  (label 86)-  (parent 64)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb rb-0 ra-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-0) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-0) (rb-prime rb-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation collapsed 3 0)-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-0))-      (recv (cat rb (enc ra-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-0))-      (send (cat rb-1 (enc ra-0 k)))))-  (label 87)-  (parent 65)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (5 2)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation collapsed 6 1)-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 88)-  (parent 65)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-3) (rb ra-2) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat rb (enc ra-2 k))) (send (enc rb k)))-    ((send (cat a-0 ra-3))-      (recv-        (cat (enc b-0 ra-3 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-2))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-2 k)))))-  (label 89)-  (parent 68)-  (unrealized (7 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-3) (rb-prime ra-2) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc ra-2 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat rb (enc ra-2 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-3))-      (recv (cat ra-2 (enc ra-3 k))) (send (enc ra-2 k))))-  (label 90)-  (parent 68)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 rb-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-2) (rb-prime rb-2) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc ra-2 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat rb (enc ra-2 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-2))-      (send (cat rb-2 (enc ra-2 k)))))-  (label 91)-  (parent 68)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime rb) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat rb (enc ra-2 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 92)-  (parent 68)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb rb-0 ra-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-0) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-0) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation collapsed 3 0)-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-0))-      (recv (cat rb-prime (enc ra-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-0 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-1 (enc rb k)))))-  (label 93)-  (parent 69)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation collapsed 6 1)-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-1 k)))))-  (label 94)-  (parent 69)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-2) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-3) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (7 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 1)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-2))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-2 k))))-    ((send (cat a-0 ra-3))-      (recv-        (cat (enc b-0 ra-3 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 95)-  (parent 70)-  (unrealized (7 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 ra-3 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-2) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-3) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (7 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-2))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-2 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-3))-      (recv (cat rb (enc ra-3 k))) (send (enc rb k))))-  (label 96)-  (parent 70)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 rb-2 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-2) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-2) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (7 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-2))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-2 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-2 (enc rb k)))))-  (label 97)-  (parent 70)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 ra-2 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-1) (rb-prime rb-prime) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-2) (rb-prime ra-1) (tb tb) (a a)-    (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-2) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-1))-      (recv (cat rb-prime (enc ra-1 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-2))-      (recv (cat ra-1 (enc ra-2 k))) (send (enc ra-1 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) ra-2))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-2 k))))+(comment "CPSA 2.0.2")+(comment "All input read")++(defprotocol neuman-stubblebine basic+  (defrole init+    (vars (a b ks name) (ra rb text) (k skey) (tb text))+    (trace (send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (defrole resp+    (vars (a b ks name) (ra rb text) (k skey) (tb text))+    (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (defrole init-reauth+    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))+    (trace (recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+  (defrole resp-reauth+    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))+    (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))+  (defrole keyserver+    (vars (a b ks name) (ra rb text) (k skey) (tb text))+    (trace (recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    (uniq-orig k)))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))+  (label 0)+  (unrealized (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((2 1) (0 2)) ((2 1) (1 0)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a k tb-0 (ltk b ks)) (1 0))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0))))+  (label 1)+  (parent 0)+  (unrealized (0 2) (1 2) (2 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp 2)+    (enc a ra-0 tb-0 (ltk b ks)) (2 0))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))))+  (label 2)+  (parent 1)+  (unrealized (0 2) (1 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb-prime k)+    (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k)))))+  (label 3)+  (parent 2)+  (unrealized (0 2) (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 tb-1+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 4)+  (parent 2)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 tb-1+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 5)+  (parent 2)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (deflistener k)+  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv k) (send k)))+  (label 6)+  (parent 2)+  (unrealized (0 2) (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-1 tb-0)) k+    (4 1) (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))+  (label 7)+  (parent 3)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 8)+  (parent 4)+  (unrealized (0 2) (4 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 9)+  (parent 5)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a k tb (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 10)+  (parent 7)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-1+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 11)+  (parent 8)+  (unrealized (0 2) (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 12)+  (parent 8)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 13)+  (parent 8)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv k) (send k)))+  (label 14)+  (parent 8)+  (unrealized (0 2) (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a k tb (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 15)+  (parent 9)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 16)+  (parent 10)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 17)+  (parent 10)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 18)+  (parent 10)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))+    ((4 2) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv k) (send k)))+  (label 19)+  (parent 10)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-1 tb-0)) k+    (5 1) (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))+  (label 20)+  (parent 11)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 21)+  (parent 12)+  (unrealized (0 2) (5 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 22)+  (parent 13)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 23)+  (parent 15)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 24)+  (parent 15)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 25)+  (parent 15)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))+    ((4 1) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))+  (label 26)+  (parent 15)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (5 1)+    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 27)+  (parent 16)+  (unrealized)+  (shape))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 28)+  (parent 17)+  (unrealized (5 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 29)+  (parent 18)+  (unrealized)+  (shape)+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a k tb (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 30)+  (parent 20)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 31)+  (parent 21)+  (unrealized (0 2) (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 tb-1 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 32)+  (parent 21)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 33)+  (parent 21)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 34)+  (parent 21)+  (unrealized (0 2) (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a k tb (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 35)+  (parent 22)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (5 1)+    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 36)+  (parent 23)+  (unrealized)+  (shape)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 37)+  (parent 24)+  (unrealized (5 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 38)+  (parent 25)+  (unrealized)+  (shape)+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 39)+  (parent 28)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 40)+  (parent 28)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 41)+  (parent 28)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 42)+  (parent 28)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation collapsed 3 0)+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 43)+  (parent 29)+  (unrealized)+  (shape)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0))+    ((3 1) (2 0)) ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation collapsed 5 1)+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 44)+  (parent 29)+  (seen 66)+  (unrealized)+  (shape)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 45)+  (parent 30)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 46)+  (parent 30)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 47)+  (parent 30)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))+    ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv k) (send k)))+  (label 48)+  (parent 30)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-1 tb-0)) k+    (6 1) (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))+  (label 49)+  (parent 31)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 50)+  (parent 32)+  (unrealized (0 2) (6 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 51)+  (parent 33)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 52)+  (parent 35)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 53)+  (parent 35)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 54)+  (parent 35)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))+    ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))+  (label 55)+  (parent 35)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation collapsed 3 0)+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 56)+  (parent 36)+  (unrealized)+  (shape))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 57)+  (parent 37)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 58)+  (parent 37)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 59)+  (parent 37)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 60)+  (parent 37)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb rb-0 rb-prime-0 rb-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation collapsed 3 0)+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 61)+  (parent 38)+  (unrealized)+  (shape)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0))+    ((3 1) (2 0)) ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation collapsed 5 1)+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 62)+  (parent 38)+  (seen 82)+  (unrealized)+  (shape)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (6 1)+    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 63)+  (parent 39)+  (unrealized)+  (shape))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 64)+  (parent 40)+  (unrealized (6 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 65)+  (parent 41)+  (unrealized)+  (shape)+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton neuman-stubblebine+  (vars (ra ra-prime rb-prime tb rb text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0))+    ((3 0) (0 0)) ((3 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation collapsed 4 1)+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 66)+  (parent 43)+  (unrealized)+  (shape))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (6 1)+    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 67)+  (parent 45)+  (unrealized)+  (shape))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 68)+  (parent 46)+  (unrealized (6 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 69)+  (parent 47)+  (unrealized)+  (shape)+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a k tb (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 70)+  (parent 49)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(comment "Strand bound exceeded--aborting run")++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-2) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 71)+  (parent 50)+  (unrealized (0 2) (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 ra-prime-3 tb-1 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 72)+  (parent 50)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 rb-prime-0 tb-1 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 73)+  (parent 50)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 74)+  (parent 50)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a k tb (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 75)+  (parent 51)+  (unrealized (0 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (6 1)+    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 76)+  (parent 52)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 77)+  (parent 53)+  (unrealized (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 78)+  (parent 54)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (6 1)+    (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 79)+  (parent 57)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 80)+  (parent 58)+  (unrealized (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 81)+  (parent 59)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars (ra ra-prime rb-prime tb rb rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0))+    ((3 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation collapsed 4 1)+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 82)+  (parent 61)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 2) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 83)+  (parent 64)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 84)+  (parent 64)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 85)+  (parent 64)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 86)+  (parent 64)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation collapsed 3 0)+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 87)+  (parent 65)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (5 2)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation collapsed 6 1)+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 88)+  (parent 65)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 89)+  (parent 68)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 90)+  (parent 68)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 91)+  (parent 68)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 92)+  (parent 68)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars (ra rb ra-prime rb-prime tb rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation collapsed 3 0)+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 93)+  (parent 69)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation collapsed 6 1)+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 94)+  (parent 69)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (7 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 95)+  (parent 70)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (7 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 96)+  (parent 70)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (7 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 97)+  (parent 70)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))     ((recv k) (send k)))   (label 98)   (parent 70)