diff --git a/ChangeLog b/ChangeLog --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,52 @@ +2010-07-29 John D. Ramsdell + + * cpsa.cabal (Version): Tagged as version 2.1.0. + +2010-07-23 John D. Ramsdell + + * cpsa.cabal (Cabal-Version): CPSA now assumes Cabal is version + 1.6 or greater, and support for GHC 6.8 has been withdrawn. + + * src/CPSA/Graph/Loader.hs (loadDefs): The graph program displays + the initial comments in an input file. + +2010-07-14 John D. Ramsdell + + * src/CPSA/Lib/Main.hs (options): Four new command line options + have been added: + -d --displacement enable displacement + -c --check-nonces check nonces first + -t --try-old-strands try old strands first + -r --reverse-nodes try old nodes first + +2010-07-09 John D. Ramsdell + + * src/CPSA/Lib/Strand.hs (contractAndOrder): Support for this + addition to authentication test solving has been removed. + + * src/CPSA/Lib/Cohort.hs (contractions): Contraction has changed + so that it only solves the test for one position of the critical + message in the test node, not every position. Previously, CPSA + was missing most general solutions due to contracting too many + positions at the same time. + + * src/CPSA/Lib/Strand.hs (pruneStrands): The pruning condition now + checks to see that there is a variable renaming between the + preskeletons involved. Previously, the only check ensured the map + was idempotent. + +2010-07-08 John D. Ramsdell + + * src/CPSA/Lib/Cohort.hs (useEcapeSetInTargetTerms): Added an + option to include the escape set in the set of target terms. + +2010-06-22 John D. Ramsdell + + * src/CPSA/Lib/Strand.hs (gainedPos): In a skeleton, a node with a + uniquely originating atom that is gained must be after the node of + origination. It used to be that only nodes in which the atom is + acquired must have the ordering. + 2010-06-18 John D. Ramsdell * cpsa.cabal (Version): Tagged as version 2.0.5. diff --git a/NEWS b/NEWS --- a/NEWS +++ b/NEWS @@ -1,5 +1,28 @@ CPSA NEWS -- history of user-visible changes. +* Changes in version 2.1.0 + +** Initial comments displayed +The graph program displays the initial comments in an input file. + +** New command line options +Four new command line options have been added: + + -d --displacement enable displacement + -c --check-nonces check nonces first + -t --try-old-strands try old strands first + -r --reverse-nodes try old nodes first + +In rare cases, the use of one of these options may allow normal +termination in a case in which CPSA aborts otherwise. + +** GHC 6.8 no longer supported +Use GHC 6.10 or greater. + +** Bugs fixes +Some minor bugs were fixed that mostly effect artificially generated +protocols. + * Changes in version 2.0.5 ** Performance enhanced diff --git a/README b/README --- a/README +++ b/README @@ -5,18 +5,6 @@ Windows. The instructions assume GHC has been installed on your machine. -CPSA has been built and tested with GHC 6.8 too, but to handle its old -version of Cabal, configure with: - -$ make CABALFLAGS=-fold - -or - -$ runghc Setup.hs configure -fold --ghc --user --prefix="${HOME}" - -The Hackage version of the Cabal file needs editing to support GHC -6.8. Simply remove occurrences of the string "--Hackage". - QUICK START (Linux) : To build and install CPSA type: diff --git a/cpsa.cabal b/cpsa.cabal --- a/cpsa.cabal +++ b/cpsa.cabal @@ -1,7 +1,7 @@ Name: cpsa -Version: 2.0.5 +Version: 2.1.0 Maintainer: ramsdell@mitre.org -Cabal-Version: >= 1.2 +Cabal-Version: >= 1.6 License: BSD3 License-File: license.txt Synopsis: Symbolic cryptographic protocol analyzer @@ -40,45 +40,47 @@ Category: Cryptography Build-Type: Simple Data-Files: - doc/index.html doc/cpsauser.html doc/cpsa.mk doc/Make.hs - doc/cpsaprimer.pdf doc/cpsaoverview.pdf doc/ffgg.scm doc/ns.scm - doc/or.scm doc/woolam.scm doc/yahalom.scm --- In cabal 1.6, use this: --- Data-Files: --- index.html cpsauser.html cpsa.mk Make.hs cpsaprimer.pdf cpsaoverview.pdf --- ffgg.scm ns.scm or.scm woolam.scm yahalom.scm --- Data-Dir: doc + index.html cpsauser.html cpsa.mk Make.hs cpsaprimer.pdf + cpsaoverview.pdf ffgg.scm ns.scm or.scm woolam.scm yahalom.scm +Data-Dir: doc Extra-Source-Files: Makefile ChangeLog README NEWS ghci cpsatst doc/README doc/Makefile doc/macros.tex doc/cpsaprimer.tex doc/bcasyntax.tex doc/cpsatheory.tex doc/cpsaspec.tex doc/cpsadesign.tex doc/cpsaoverview.tex doc/cpsadiagrams.mp doc/strands.mp doc/cmstrands.mp doc/carriers.mp doc/termtree.mp doc/cpsa.bib - doc/SDAG.lhs src/index.html src/cpsacgi src/cpsacgi.py src/cpsa2svg + doc/SDAG.lhs doc/cpsatheory.pdf doc/cpsaspec.pdf doc/cpsadesign.pdf + src/index.html src/cpsacgi src/cpsacgi.py src/cpsa2svg src/cpsa.el src/httpd_allow_execmem.te src/cpsaops.scm src/preskel src/cpsa.pl src/pp.pl src/sexpr.pl tst/README tst/Makefile tst/Make.hs tst/checktst tst/cpsagraphall tst/cpsashapesall - tst/dass.lisp tst/blanchet.scm tst/blanchet.tst - tst/completeness-test.scm tst/completeness-test.tst - tst/missing_contraction.scm tst/missing_contraction.tst - tst/no_contraction.scm tst/no_contraction.tst tst/dass-mod.lisp + tst/blanchet.scm tst/blanchet.tst tst/completeness-test.scm + tst/completeness-test.tst tst/dass.lisp tst/dass-mod.lisp tst/dass_simple.scm tst/dass_simple.tst tst/denning-sacco.scm - tst/denning-sacco.tst tst/dh.sch tst/dh.tst tst/ds-short.lisp - tst/dy.lsp tst/dy.tst tst/epmo_acctnum.lsp tst/epmo_acctnum.tst - tst/epmo.scm tst/encsig.scm tst/encsig.tst tst/epmo.tst tst/ffgg.scm - tst/ffgg.tst tst/isoreject.scm tst/isoreject.tst tst/kelly1.scm - tst/kelly1.tst tst/kelly64.lisp tst/kerb5.lisp tst/kerberos.scm - tst/kerberos.tst tst/neuman-stubblebine-alt.lisp - tst/neuman-stubblebine-reauth.lisp tst/neuman-stubblebine-reauth.lsp - tst/neuman-stubblebine-reauth.tst tst/neuman-stubblebine.scm - tst/neuman-stubblebine.tst tst/nsl3.scm tst/nsl3.tst tst/nsl4.lisp + tst/denning-sacco.tst tst/dh.sch tst/dh.tst + tst/dh_unifywithconst.sch tst/dh_unifywithconst.tst + tst/ds-short.lisp tst/dy.lsp tst/dy.tst tst/encsig.scm + tst/encsig.tst tst/epmo_acctnum.lsp tst/epmo_acctnum.tst + tst/epmo.scm tst/epmo.tst tst/ffgg.scm tst/ffgg.tst + tst/isoreject.scm tst/isoreject.tst tst/kelly1.scm tst/kelly1.tst + tst/kelly64.lisp tst/kerb5.lisp tst/kerberos.scm tst/kerberos.tst + tst/missing_contraction.scm tst/missing_contraction.tst + tst/neuman-stubblebine-alt.lisp tst/neuman-stubblebine-reauth.lisp + tst/neuman-stubblebine-reauth.lsp tst/neuman-stubblebine-reauth.tst + tst/neuman-stubblebine.scm tst/neuman-stubblebine.tst + tst/no_contraction.scm tst/no_contraction.tst + tst/non_transforming.scm tst/non_transforming.tst tst/nsl3.scm + tst/nsl3.tst tst/nsl4cm1.lsp tst/nsl4cm1.tst tst/nsl4.lisp tst/nsl4resp2.lisp tst/nsl5i.lisp tst/nsl5.lisp tst/nslsk.scm tst/nslsk.tst tst/ns.scm tst/ns.tst tst/or.scm tst/or.tst - tst/pca.lsp tst/pca.tst tst/tnsl5.lisp tst/updatetst tst/sigenc.scm - tst/sigenc.tst tst/weird.scm tst/weird.tst tst/wmf.lsp tst/wmf.tst - tst/woolam.scm tst/woolam.tst tst/yahalom.scm tst/yahalom.tst - tst/sorted_epmo_acctnum.scm tst/sorted_epmo_acctnum.tst - tst/nsl4cm1.lsp tst/nsl4cm1.tst + tst/pca.lsp tst/pca.tst tst/pruning1.scm tst/pruning1.tst + tst/sigenc.scm tst/sigenc.tst tst/sorted_epmo_acctnum.scm + tst/sorted_epmo_acctnum.tst tst/targetterms2.scm + tst/targetterms2.tst tst/targetterms6.scm tst/targetterms6.tst + tst/tnsl5.lisp tst/uncarried_keys.scm tst/uncarried_keys.tst + tst/uo.scm tst/uo.tst tst/updatetst tst/weird.scm tst/weird.tst + tst/wmf.lsp tst/wmf.tst tst/woolam.scm tst/woolam.tst + tst/yahalom.scm tst/yahalom.tst -- Disable with -f-par option during configuration. @@ -86,22 +88,16 @@ Description: Enable use of the parallel construct par Default: True -Flag Old - Description: Enable support for cabal < 1.6 - Default: False - -- Algebra implementations must import CPSA.Lib.CPSA. -- Tools may additionally import CPSA.Lib.Entry. -- No other modules in CPSA.Lib should be imported by applications. Executable cpsa Main-Is: CPSA/Lib/Main.hs - Build-Depends: base >= 3 &&< 5, containers + Build-Depends: base >= 3 && < 5, containers GHC-Options: -Wall -fno-warn-name-shadowing -fwarn-unused-imports Hs-Source-Dirs: src ---Hackage if flag(old) ---Hackage Hs-Source-Dirs: dist/build/autogen Other-Modules: Paths_cpsa CPSA.Lib.Vector CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra @@ -120,8 +116,6 @@ GHC-Options: -Wall -fno-warn-name-shadowing -fwarn-unused-imports Hs-Source-Dirs: src ---Hackage if flag(old) ---Hackage Hs-Source-Dirs: dist/build/autogen Other-Modules: Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol @@ -137,8 +131,6 @@ GHC-Options: -Wall -fno-warn-name-shadowing -fwarn-unused-imports Hs-Source-Dirs: src ---Hackage if flag(old) ---Hackage Hs-Source-Dirs: dist/build/autogen Other-Modules: Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol @@ -151,8 +143,6 @@ GHC-Options: -Wall -fno-warn-name-shadowing -fwarn-unused-imports Hs-Source-Dirs: src ---Hackage if flag(old) ---Hackage Hs-Source-Dirs: dist/build/autogen Other-Modules: Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol @@ -167,8 +157,6 @@ GHC-Options: -Wall -fno-warn-name-shadowing -fwarn-unused-imports Hs-Source-Dirs: src ---Hackage if flag(old) ---Hackage Hs-Source-Dirs: dist/build/autogen Other-Modules: Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol @@ -181,8 +169,6 @@ GHC-Options: -Wall -fno-warn-name-shadowing -fwarn-unused-imports Hs-Source-Dirs: src ---Hackage if flag(old) ---Hackage Hs-Source-Dirs: dist/build/autogen Other-Modules: Paths_cpsa CPSA.Lib.Utilities CPSA.Lib.Pretty CPSA.Lib.SExpr CPSA.Lib.Printer CPSA.Lib.Entry CPSA.Lib.Algebra CPSA.Lib.Protocol diff --git a/doc/Makefile b/doc/Makefile --- a/doc/Makefile +++ b/doc/Makefile @@ -62,7 +62,7 @@ pdflatex $(THEORY).tex CLEAN_FILES := $(PRIMER).pdf $(OVERVIEW).pdf \ - $(DESIGN).pdf $(SPEC).pdf $(THEORY)\ + $(DESIGN).pdf $(SPEC).pdf $(THEORY).pdf \ $(wildcard *.log *.aux *.toc *.mps *.mpx) \ $(wildcard *.bbl *.blg *.ind *.idx *.ilg *.out) diff --git a/doc/cpsa.bib b/doc/cpsa.bib --- a/doc/cpsa.bib +++ b/doc/cpsa.bib @@ -131,3 +131,40 @@ pages = "198--208", year = 1983 } + +@Manual{cpsaspec09, + title = {The {CPSA} Specification: + A Reduction System for Searching for Shapes in Cryptographic Protocols}, + OPTkey = {}, + author = {John D.~Ramsdell and Joshua D.~Guttman and Paul D.~Rowe}, + organization = {The MITRE Corporation}, + OPTaddress = {}, + OPTedition = {}, + OPTmonth = {}, + year = 2009, + note = {In \url{http://hackage.haskell.org/package/cpsa} source + distribution, \texttt{doc} directory}, + OPTannote = {} +} + +@InCollection{cpsa09, + author = {John D. Ramsdell and Joshua D. Guttman}, + title = {{CPSA}: A cryptographic protocol shapes analyzer}, + booktitle = {Hackage}, + OPTcrossref = {}, + OPTkey = {}, + OPTpages = {}, + publisher = {The MITRE Corporation}, + year = 2009, + OPTeditor = {}, + OPTvolume = {}, + OPTnumber = {}, + OPTseries = {}, + OPTtype = {}, + OPTchapter = {}, + OPTaddress = {}, + OPTedition = {}, + OPTmonth = {}, + note = {\url{http://hackage.haskell.org/package/cpsa}}, + OPTannote = {} +} diff --git a/doc/cpsadesign.pdf b/doc/cpsadesign.pdf new file mode 100644 Binary files /dev/null and b/doc/cpsadesign.pdf differ diff --git a/doc/cpsadesign.tex b/doc/cpsadesign.tex --- a/doc/cpsadesign.tex +++ b/doc/cpsadesign.tex @@ -719,7 +719,7 @@ $$ \begin{array}{r@{}c@{}l} \ops{C}_{s,s'}(\cn{k}(P, I, O, N, U))&{}={}& -\cn{k}(P, I\dagger s, \ops{C}_{\phi}\circ O, N, U)\\ +\cn{k}(P, I\circ\phi'_s, \ops{C}_{\phi}\circ O, N, U)\\ \ops{C}_\phi(\cn{o}(n_0, n_1))&{}={} &\cn{o}(\ops{C}_\phi(n_0), \ops{C}_\phi(n_1))\\ \ops{C}_\phi(\cn{n}(s, p))&{}={}&\cn{n}(\phi(s), p)\\ @@ -733,10 +733,10 @@ j-1&\mbox{if $j>s$}\\ j&\mbox{otherwise} \end{array}\right.\\ -(I\dagger s)(j)&{}={}&\left\{ +\phi'_s(j)&{}={}&\left\{ \begin{array}{ll} -I(j+1)&\mbox{if $j\geq s$}\\ -I(j)&\mbox{otherwise} +j+1&\mbox{if $j\geq s$}\\ +j&\mbox{otherwise} \end{array}\right. \end{array} $$ where the trace of~$I(s)$ is a prefix of the trace of~$I(s')$. @@ -744,7 +744,8 @@ $\cn{o}(\cn{n}(s,p),\cn{n}(s,p'))$ are removed from the ordering when $ps$}\\ +j&\mbox{otherwise.} +\end{array}\right. +\end{array}$$ +\end{defn} + +The compression operator is only used when $\Theta_X(s)$ is a prefix +of $\Theta_X(s')$, and when there is a homomorphism from~$k$ to +$\ops{C}_{s,s'}(k)$. Note that the compression operator is defined +only when relation~$\prec'$ is asymmetric, and +that $\comp{\phi_{s,s'}}{\phi'_s}=\idphi$. + +\begin{defn}[Ordering Enrichment Operator] +Operator~$\ops{E}(k)$ enriches~$\kprec{k}$ by adding all elements implied +by unique origination. +\end{defn} +The ordering enrichment operator is total and idempotent. + +\begin{defn}[Augmentation Operator] +For node~$n$, role~$r$, and trace~$C$, operator~$\ops{A}_{n,r,C}$ is: +$$\begin{array}{l} +\ops{A}_{n,r,C}(\skel_X(\rl,P,\Theta_X,\prec,N,U)) = {}\\ +\quad\skel_{X'}(\rl\append r,P, +\Theta_X(s)\append C,\prec',N',U') +\end{array}$$ +where $X'$ is $X$ extended to include the variables in~$C$, +$\prec'$ is the minimal extension of $\prec$ such that +$(|\Theta_X|+1,|C|)\prec' n$, $N'$ is $N$ extended with +non-origination assumptions inherited from~$r$ by~$C$, and likewise +for~$U'$. +\end{defn} + +\subsection{Hulling Step} + +For preskeleton~$k=\skel(\_,\_,\Theta_k,\_,\_,U_k)$, assume $t\in U_k$ +originates on distinct strands~$s$ and~$s'$, and the height of~$s$ is +no greater than the height of~$s'$. Operator +$\ops{H}_{s,s'}=\comp{\ops{C}_{s,s'}}{\ops{S}_\sigma}$ is a hulling +step if there is a most general unifier~$\sigma$ such that +$\comp\sigma{\Theta_k(s)} = \comp\sigma{\prefix{\Theta_k(s')}{h}}$ +with $h=|\Theta_k(s)|$, and there is a homomorphism from~$k$ to +$\ops{H}_{s's'}(k)$. + +\subsection{Pruning Step} + +For preskeleton~$k=\skel(\_,\_,\Theta_k,\_,\_,U_k)$, assume +strands~$s$ and~$s'$ are distinct, and the height of~$s$ is +no greater than the height of~$s'$. Operator +$\ops{P}_{s,s'}=\comp{\ops{C}_{s,s'}}{\ops{S}_\sigma}$ is a pruning +step if there is a sort preserving variable renaming~$\sigma$ such +that $\comp\sigma{\Theta_k(s)} = \prefix{\Theta_k(s')}{h}$ with +$h=|\Theta_k(s)|$, and two homomorphisms. Let $k'=\ops{P}_{s,s'}(k)$ +and $\phi=\phi_{s,s'}$. The required homomorphisms are +$k\homomorphism{\phi,\sigma}k'$ and $k'\homomorphism{\phi',\sigma'}k$ +such that $\phi\circ\phi'=\idphi$ and $\sigma\circ\sigma'=\idsigma$. + +\subsection{Augmentation Step}\label{sec:aug step} + +An augmentation step is used to add a strand to a skeleton. An +augmentation step has the form +$k\mapsto\ops{H}_k(\ops{A}_{n,r,C}(\ops{S}_\sigma(k)))$ , where +$\ops{H}_k$ is a slight variation on a hulling step. For now, ignore +augmentation parameters $n$, $r$, $C$, and $\sigma$, and focus +on~$\ops{H}_k$. Let +$k'=\ops{H}_k(\ops{A}_{n,r,C}(\ops{S}_\sigma(k)))$. An augmentation +step is defined only if there is a homomorphism from~$k$ to~$k'$. +Operator~$\ops{H}_k$ always focuses on the added strand, and does not +require that nodes at which a uniquely originating atom originates on +the added strand is preserved. In other words, for +$k'=\ops{H}_k(k'')$, $\ops{H}_k$ requires there be a homomorphism +from~$k$ to~$k'$, but not one from~$k''$ to~$k'$. There also must be a +homomorphism from~$k$ to~$\ops{S}_\sigma(k)$. + +Suppose skeleton~$k=\skel_X(\_,P,\_,\_,\_,\_)$ has a critical +position~$p$ at node~$n$, and $t_c=\mesg_k(n)\termat p$ is the +critical message. {\cpsa} computes the parameters for a set of +augmentation steps as follows. First, compute the target messages. +Let $T_e=E(\pubmsg_k(n), t_c)$. The target messages are $\fn{targ}(t_c, T_e)$. +Next, for each $\role_Y(C,N,U)\in +P$ and each index~$h$ where $C(h)=\outbnd t$, a transmission, do the +following. +\begin{description} +\item[Create fresh variables:] +Let~$\sigma_r$ be a sort preserving variable renaming, +where the domain is the variables that occur in $\prefix C h$, and every +variable in the range does not occur in~$\svars(X)$ or~$\svars(P)$. + +\item[Insert critical message:] For each message~$t'$ carried by~$t$, + and each~$t_t\in \fn{targ}(t_c, T_e)$, consider most general unifiers~$\sigma'$ + where, $\sigma'(t')=\sigma'(t_t)$ and $\sigma_r\unlhd\sigma'$. + +\item[Ensure previous events do not transform:] For each $\sigma'$, find + most general unifiers~$\sigma$ such that for $1\leq i 
$ cpsa -h
 Usage: cpsa [OPTIONS] [FILE]
-  -o FILE    --output=FILE     output FILE
-  -l INT     --limit=INT       step count limit (default 2000)
-  -b INT     --bound=INT       strand count bound (default 8)
-  -m INT     --margin=INT      set output margin (default 72)
-  -e         --expand          expand macros only; don't analyze
-  -n         --noisochk        disable isomorphism checks
-  -a STRING  --algebra=STRING  algebra (default basic)
-  -s         --show-algebras   show algebras
-  -h         --help            show help message
-  -v         --version         show version number
+ -o FILE --output=FILE output FILE + -l INT --limit=INT step count limit (default 2000) + -b INT --bound=INT strand count bound (default 8) + -m INT --margin=INT set output margin (default 72) + -e --expand expand macros only; don't analyze + -n --noisochk disable isomorphism checks + -d --displacement enable displacement + -c --check-nonces check nonces first + -t --try-old-strands try old strands first + -r --reverse-nodes try younger nodes first + -a STRING --algebra=STRING algebra (default basic) + -s --show-algebras show algebras + -h --help show help message + -v --version show version number

This program will abort if too many steps are taken. A skeleton is printed diff --git a/doc/macros.tex b/doc/macros.tex --- a/doc/macros.tex +++ b/doc/macros.tex @@ -1,5 +1,5 @@ \newcommand{\cpsa}{\textsc{cpsa}} -\newcommand{\version}{2.0.5} +\newcommand{\version}{2.0.6} \newcommand{\cpsacopying}{\begingroup \renewcommand{\thefootnote}{}\footnotetext{{\copyright} 2010 The MITRE Corporation. Permission to copy without fee all or part of @@ -32,8 +32,9 @@ \newcommand{\ith}{\imath^\mathrm{th}} \newcommand{\jth}{\jmath^\mathrm{th}} \newcommand{\append}{\mathbin{{}^\smallfrown}} +\newcommand{\prefix}[2]{#1|_{#2}} \newcommand{\orig}{\mathcal{O}} -\newcommand{\acqu}{\mathcal{A}} +\newcommand{\gain}{\mathcal{G}} %\newcommand{\pow}[1]{\mathcal{P}(#1)} %\newcommand{\pow}[1]{\wp(#1)} \newcommand{\pow}[1]{2^{#1}} diff --git a/src/CPSA/Annotations/Annotations.hs b/src/CPSA/Annotations/Annotations.hs --- a/src/CPSA/Annotations/Annotations.hs +++ b/src/CPSA/Annotations/Annotations.hs @@ -103,7 +103,7 @@ loadFormulas pos vars len gen (x : xs) = do prin <- loadTerm vars x - case isBaseTerm prin of + case isAtom prin of True -> return () False -> fail (shows pos "principal not an atom") (g, alist) <- mapAccumLM (loadIndexedFormula vars len) gen xs diff --git a/src/CPSA/Basic/Algebra.hs b/src/CPSA/Basic/Algebra.hs --- a/src/CPSA/Basic/Algebra.hs +++ b/src/CPSA/Basic/Algebra.hs @@ -228,10 +228,10 @@ termWellFormed xts t1 -- Is the sort of the term a base sort? -isBaseTerm :: Term -> Bool -isBaseTerm (I _) = False -isBaseTerm (C _) = False -isBaseTerm (F s _) = +isAtom :: Term -> Bool +isAtom (I _) = False +isAtom (C _) = False +isAtom (F s _) = s == Text || s == Data || s == Name || s == Skey || s == Akey -- Does a term occur in another term? @@ -296,7 +296,7 @@ ba t0 && ba t1 ba t@(F Enc [t0, t1]) = S.member t knowns || ba t0 && ba t1 - ba t = isBaseTerm t && not (S.member t unguessable) + ba t = isAtom t && not (S.member t unguessable) -- Compute the decomposition given some known terms and some unguessable -- atoms. The code is quite tricky. It iterates until the known @@ -409,7 +409,7 @@ instance C.Term Term where isVar = isVar - isBaseTerm = isBaseTerm + isAtom = isAtom termsWellFormed = termsWellFormed occursIn = occursIn foldVars = foldVars diff --git a/src/CPSA/DiffieHellman/Algebra.hs b/src/CPSA/DiffieHellman/Algebra.hs --- a/src/CPSA/DiffieHellman/Algebra.hs +++ b/src/CPSA/DiffieHellman/Algebra.hs @@ -364,12 +364,12 @@ termWellFormed xts t1 -- Is the sort of the term a base sort? -isBaseTerm :: Term -> Bool -isBaseTerm (I _) = False -isBaseTerm (C _) = False -isBaseTerm (F s _) = +isAtom :: Term -> Bool +isAtom (I _) = False +isAtom (C _) = False +isAtom (F s _) = s == Text || s == Data || s == Name || s == Skey || s == Akey || s == Base -isBaseTerm (G _) = True +isAtom (G _) = True -- Does a term occur in another term? occursIn :: Term -> Term -> Bool @@ -456,7 +456,7 @@ ba t0 && ba t1 ba t@(F Enc [t0, t1]) = S.member t knowns || ba t0 && ba t1 - ba t = isBaseTerm t && not (S.member t unguessable) + ba t = isAtom t && not (S.member t unguessable) -- Compute the decomposition given some known terms and some unguessable -- atoms. The code is quite tricky. It iterates until the known @@ -569,7 +569,7 @@ instance C.Term Term where isVar = isVar - isBaseTerm = isBaseTerm + isAtom = isAtom termsWellFormed = termsWellFormed occursIn = occursIn foldVars = foldVars diff --git a/src/CPSA/Graph/ExpandedView.hs b/src/CPSA/Graph/ExpandedView.hs --- a/src/CPSA/Graph/ExpandedView.hs +++ b/src/CPSA/Graph/ExpandedView.hs @@ -10,6 +10,7 @@ module CPSA.Graph.ExpandedView (expandedView) where import qualified Data.Set as S +import Data.List (intersperse) import System.IO import CPSA.Lib.CPSA import CPSA.Graph.XMLOutput @@ -19,10 +20,11 @@ import CPSA.Graph.Preskeleton import CPSA.Graph.Tree -expandedView :: Handle -> Config -> Int -> [Preskel] -> IO () -expandedView h conf margin ps = +expandedView :: Handle -> Config -> Int -> [SExpr Pos] -> [Preskel] -> IO () +expandedView h conf margin cmts ps = do hPutList h (header ps) + comments h margin cmts let f = forest ps case f of [t] -> @@ -46,6 +48,13 @@ where title [] = " CPSA" title (k : _) = " CPSA " ++ protocol k ++ "" + +comments :: Handle -> Int -> [SExpr Pos] -> IO () +comments h margin cmts = + do + hPutStrLn h "" + let xs = concat $ intersperse "\n" $ map (pp margin indent) cmts + hPutStrLn h $ show $ mc "pre" [] xs closer :: [String] closer = diff --git a/src/CPSA/Graph/LaTeXView.hs b/src/CPSA/Graph/LaTeXView.hs --- a/src/CPSA/Graph/LaTeXView.hs +++ b/src/CPSA/Graph/LaTeXView.hs @@ -9,17 +9,20 @@ module CPSA.Graph.LaTeXView (latexView) where import System.IO -import CPSA.Lib.CPSA (nats) +import CPSA.Lib.CPSA (nats, SExpr, Pos) import CPSA.Lib.Entry (writeSExpr) import CPSA.Graph.Loader import CPSA.Graph.Layout -- Main entry point -latexView :: Handle -> Int -> [Preskel] -> IO () -latexView h margin ps = +latexView :: Handle -> Int -> [SExpr Pos] -> [Preskel] -> IO () +latexView h margin cmts ps = do hPutStrLn h "\\usepackage[matrix,arrow,curve]{xy}" hPutStrLn h "\\begin{document}" + hPutStrLn h "\\begin{verbatim}" + mapM_ (writeSExpr h margin) cmts + hPutStrLn h "\\end{verbatim}" mapM_ (writeLnPreskel h margin) ps hPutStrLn h "\n\\end{document}" hClose h diff --git a/src/CPSA/Graph/Loader.hs b/src/CPSA/Graph/Loader.hs --- a/src/CPSA/Graph/Loader.hs +++ b/src/CPSA/Graph/Loader.hs @@ -115,13 +115,20 @@ type Pair = (Node, Node) -- An ordering of nodes --- Load the top-level defs or return an error message +-- Load the initial comments and top-level defs or return an error +-- message -loadDefs :: Monad m => [SExpr Pos] -> m [Preskel] +loadDefs :: Monad m => [SExpr Pos] -> m ([SExpr Pos], [Preskel]) loadDefs xs = do - (_, ks, _) <- foldM loadSExpr ([], [], 0) xs - return (reverse ks) + let (cmts, xs') = loadComments [] xs + (_, ks, _) <- foldM loadSExpr ([], [], 0) xs' + return (reverse cmts, reverse ks) + +loadComments :: [SExpr Pos] -> [SExpr Pos] -> ([SExpr Pos], [SExpr Pos]) +loadComments cmts (cmt@(L _ (S _ "comment" : _)): xs) = + loadComments (cmt:cmts) xs +loadComments cmts xs = (cmts, xs) -- The integer is used to add a label to preskeleton without one. type LoadSExpr = ([(String, Protocol)], [Preskel], Int) diff --git a/src/CPSA/Graph/Main.hs b/src/CPSA/Graph/Main.hs --- a/src/CPSA/Graph/Main.hs +++ b/src/CPSA/Graph/Main.hs @@ -38,9 +38,9 @@ preskels <- try (loadDefs sexprs) case preskels of Left err -> abort (ioeGetErrorString err) - Right [] -> + Right (_, []) -> abort "Empty input" - Right preskels -> + Right (cmts, preskels) -> do h <- outputHandle (file params) case format params of @@ -48,14 +48,14 @@ do hPutStrLn h "\\documentclass[12pt]{article}" hPutStrLn h ("% " ++ cpsaVersion) - latexView h (margin params) preskels + latexView h (margin params) cmts preskels _ -> do hPutStrLn h "" hPutStrLn h ("") case format params of XML -> expandedView h (config False) - (margin params) preskels + (margin params) cmts preskels SVG -> compactView h (config True) preskels LaTeX -> error "Bad case in main" diff --git a/src/CPSA/Lib/Algebra.hs b/src/CPSA/Lib/Algebra.hs --- a/src/CPSA/Lib/Algebra.hs +++ b/src/CPSA/Lib/Algebra.hs @@ -27,7 +27,7 @@ class (Ord t, Show t) => Term t where isVar :: t -> Bool -- Is term a variable in the algebra? - isBaseTerm :: t -> Bool -- Is the sort of this term a base sort? + isAtom :: t -> Bool -- Is the sort of this term a base sort? -- Does a term occur in another term? occursIn :: t -> t -> Bool diff --git a/src/CPSA/Lib/Cohort.hs b/src/CPSA/Lib/Cohort.hs --- a/src/CPSA/Lib/Cohort.hs +++ b/src/CPSA/Lib/Cohort.hs @@ -6,7 +6,7 @@ -- modify it under the terms of the BSD License as published by the -- University of California. -module CPSA.Lib.Cohort (reduce, unrealized) where +module CPSA.Lib.Cohort (Mode(..), reduce, unrealized) where import Control.Monad import qualified Data.Set as S @@ -59,6 +59,10 @@ -- Compile time switches for expermentation. +-- Include the escape set in the set of target terms +useEcapeSetInTargetTerms :: Bool +useEcapeSetInTargetTerms = False -- True + -- Filter a cohort for skeletons that solve the test. Turn off only -- to debug the other parts of the test solving algorithm. useSolvedFilter :: Bool @@ -69,14 +73,6 @@ useMguFilter :: Bool useMguFilter = True --- Solve encryption tests first when possible. -useEncryptionFirstOrder :: Bool -useEncryptionFirstOrder = True - --- Experiment: try adding orderings while contracting. -useContractionsWithOrdering :: Bool -useContractionsWithOrdering = False - -- Penetrator derivable predicate and checking for unrealized skeletons. derivable :: Algebra t p g s e c => Set t -> Set t -> t -> Bool @@ -124,11 +120,11 @@ where u = uniqOrig k --- Suppose k --v,t-> k', where k |-pi,sigma-> k'. Let t'=sigma(t), --- T=sigma(esc(k, v, t)), and t"=msg(k', pi(v)). Term t is solved in --- k' from k at v if: +-- Suppose k --v,p-> k', where k |-pi,sigma-> k'. Let t=msg(k, v)@p, +-- t'=sigma(t), T=sigma(esc(k, v, t)), and t"=msg(k', pi(v)). +-- Position p is solved in k' from k at v if: -- --- 1. t' is carried only within T in t", or +-- 1. some member of anc(t", p) is in T', or -- -- 2. for some t in outpred(k', pi(v)), t' is not carried only within -- T in t, or @@ -136,10 +132,19 @@ -- 3. the decryption key for an element of T is derivable, or -- -- 4. t' is an encryption and the encryption key for t' is derivable. -solved :: Algebra t p g s e c => t -> Maybe t -> Set t -> +-- +-- Haskell variables: +-- ct = t +-- pos = p +-- ek = encription key if ct is an encyption else nothing +-- escape = esc(k, v, t) +-- k = k +-- (s, p) = v +-- subst = sigma +solved :: Algebra t p g s e c => t -> p -> Maybe t -> Set t -> Preskel t p g s e c -> Node -> s -> Bool -solved ct ek escape k (s, p) subst = - carriedOnlyWithin ct' escape' t || +solved ct pos ek escape k (s, p) subst = + isAncestorInSet escape' t pos || any (not . carriedOnlyWithin ct' escape') (S.toList ts) || any (maybe False (derivable a ts) . decryptionKey) (S.toList escape') || maybe False (derivable a ts) ek @@ -153,24 +158,40 @@ ts = S.map (evtTerm . event) vs -- Outbound predecessors (a, _) = avoid k -maybeSolved :: Algebra t p g s e c => t -> Maybe t -> Set t -> +maybeSolved :: Algebra t p g s e c => t -> p -> Maybe t -> Set t -> Preskel t p g s e c -> Node -> s -> Bool -maybeSolved ct ek escape k n subst = - not useSolvedFilter || solved ct ek escape k n subst +maybeSolved ct pos ek escape k n subst = + not useSolvedFilter || solved ct pos ek escape k n subst +data Mode = Mode + { noGeneralization :: Bool, + addDisplacements :: Bool, + nonceFirstOrder :: Bool, + visitOldStrandsFirst :: Bool, + reverseNodeOrder :: Bool } + deriving Show + -- Abort if there is an unrealized node without a test, otherwise -- return a list of skeletons that solve one test. If the skeleton is -- realized, try to generalize it, but only when noIsoChk is false. -reduce :: Algebra t p g s e c => Bool -> Preskel t p g s e c -> +reduce :: Algebra t p g s e c => Mode -> Preskel t p g s e c -> [Preskel t p g s e c] -reduce noIsoChk k = - firstJust (map (testStrand k u a) ss) +reduce mode k = + firstJust (map (testStrand mode k u a) ss) (whenRealized k) -- Skeleton is realized where - ss = reverse (strands k) -- Visit recently added strands first + ss = strandVisitOrder mode (strands k) (a, u) = avoid k - whenRealized k = if noIsoChk then [] else realizedReductions k + whenRealized k = + if noGeneralization mode then [] else realizedReductions k +strandVisitOrder :: Mode -> [a] -> [a] +strandVisitOrder mode ss = + if visitOldStrandsFirst mode then + ss -- Visit old strands first + else + reverse ss -- Visit recently added strands first (default) + -- These reductions use isomorphism checking. realizedReductions :: Algebra t p g s e c => Preskel t p g s e c -> [Preskel t p g s e c] @@ -189,11 +210,11 @@ firstJust (Nothing : xs) x = firstJust xs x -- Look for a test node in a strand -testStrand :: Algebra t p g s e c => Preskel t p g s e c -> +testStrand :: Algebra t p g s e c => Mode -> Preskel t p g s e c -> [t] -> Set t -> Strand t p g s e c -> Maybe [Preskel t p g s e c] -testStrand k u a s = - loop S.empty (nodes s) +testStrand mode k u a s = + loop S.empty (nodeVisitOrder mode $ nodes s) where loop _ [] = Nothing loop ns (n : nodes) = @@ -207,13 +228,20 @@ if der t then loop ns' nodes else - Just $ testNode k u ts der (graphNode n) t + Just $ testNode mode k u ts der (graphNode n) t +nodeVisitOrder :: Mode -> [a] -> [a] +nodeVisitOrder mode nodes = + if reverseNodeOrder mode then + reverse nodes -- Visit latest nodes first + else + nodes -- Visit earliest nodes first (default) + -- Look for a critical term that makes this node a test node. -testNode :: Algebra t p g s e c => Preskel t p g s e c -> +testNode :: Algebra t p g s e c => Mode -> Preskel t p g s e c -> [t] -> Set t -> (t -> Bool) -> Node -> t -> [Preskel t p g s e c] -testNode k u ts derivable n t = +testNode mode k u ts derivable n t = loop cts where loop [] = error ("Cohort.testNode missing test at " ++ show n) @@ -221,17 +249,19 @@ case escapeSet ts derivable ct of Nothing -> loop cts Just escape -> - if carriedOnlyWithin ct escape t then - loop cts - else - solveNode k ct ek n t escape - cts = - if useEncryptionFirstOrder then - map g (filter h (encryptions t)) ++ - map f (filter (flip carriedBy t) u) - else + places (carriedPlaces ct t) + where + places [] = loop cts -- Find position at which + places (p : ps) -- ct has escaped + | isAncestorInSet escape t p = places ps + | otherwise = solveNode mode k ct p ek n t escape + cts = -- Potential critical messages + if nonceFirstOrder mode then map f (filter (flip carriedBy t) u) ++ map g (filter h (encryptions t)) + else + map g (filter h (encryptions t)) ++ + map f (filter (flip carriedBy t) u) f ct = (ct, Nothing) g (ct, ek) = (ct, Just ek) h (_, ek) = not (derivable ek) @@ -249,53 +279,47 @@ carriedOnlyWithin :: Algebra t p g s e c => t -> Set t -> t -> Bool carriedOnlyWithin target escape source = - existsOnAllPathsToTarget (flip S.member escape) target source + all (isAncestorInSet escape source) (carriedPlaces target source) --- existsOnAllPathsToTarget pred target source is true if the --- predicate is true for some term on a path for every path from the --- source to the target -existsOnAllPathsToTarget :: Algebra t p g s e c => - (t -> Bool) -> t -> t -> Bool -existsOnAllPathsToTarget pred target source = - all (any pred) (map (ancestors source) (carriedPlaces target source)) +-- isAncestorInSet set source position is true if there is one ancestor of +-- source at position that is in the set. +isAncestorInSet :: Algebra t p g s e c => Set t -> t -> p -> Bool +isAncestorInSet set source position = + any (flip S.member set) (ancestors source position) -solveNode :: Algebra t p g s e c => Preskel t p g s e c -> - t -> Maybe t -> Node -> t -> Set t -> +-- Solve critical message at position pos at node n. +-- ct = t @ pos +-- t = msg(k, n) +solveNode :: Algebra t p g s e c => Mode -> Preskel t p g s e c -> + t -> p -> Maybe t -> Node -> t -> Set t -> [Preskel t p g s e c] -solveNode k ct ek n t escape = - cons ++ augs ++ cwos ++ lsns +solveNode mode k ct pos ek n t escape = + cons ++ augs ++ lsns where - cons = contractions k ct ek n t escape cause - augs = augmentations k ct ek n escape cause - cwos = - if useContractionsWithOrdering then - contractionsWithOrdering k ct ek n escape cause - else - [] - lsns = addListeners k ct ek n t escape cause + cons = contractions k ct pos ek n t escape cause + augs = augmentations (addDisplacements mode) k ct pos ek n escape cause + lsns = addListeners k ct pos ek n t escape cause cause = Cause (dir ek) n ct escape -- Contractions +-- Contract the critical message at the given position. contractions :: Algebra t p g s e c => Preskel t p g s e c -> - t -> Maybe t -> Node -> t -> Set t -> + t -> p -> Maybe t -> Node -> t -> Set t -> Cause t p g s e c -> [Preskel t p g s e c] -contractions k ct ek n t escape cause = - [ k | subst <- mgus $ cows ct escape t (gen k, emptySubst), +contractions k ct pos ek n t escape cause = + [ k | let anc = ancestors t pos, + subst <- mgus $ solve escape anc (gen k, emptySubst), (k, n, subst') <- maybeToList $ contract k n cause subst, - maybeSolved ct ek escape k n subst' ] + maybeSolved ct pos ek escape k n subst' ] -cows :: Algebra t p g s e c => t -> Set t -> t -> (g, s) -> [(g, s)] -cows ct escape t subst = - if carriedOnlyWithinAtSubst ct escape t subst then - [subst] - else - concatMap f (fold ct escape t subst) - where - f subst = - cows ct escape t subst +solve :: Algebra t p g s e c => Set t -> [t] -> (g, s) -> [(g, s)] +solve escape ancestors subst = + [ s | e <- S.toList escape, + a <- ancestors, + s <- maybeToList $ unify a e subst ] -carriedOnlyWithinAtSubst :: Algebra t p g s e c => +carriedOnlyWithinAtSubst :: Algebra t p g s e c => t -> Set t -> t -> (g, s) -> Bool carriedOnlyWithinAtSubst ct escape t (_, subst) = carriedOnlyWithin ct' escape' t' @@ -313,11 +337,7 @@ escape' = S.map (substitute subst) escape t' = substitute subst t f substs p = - [ s | - a <- ancestors t' p, - e <- S.toList escape', - subst <- substs, - s <- maybeToList $ unify a e subst ] + [ s | subst <- substs, s <- solve escape' (ancestors t' p) subst ] -- Filter out non-most general unifiers mgus :: Algebra t p g s e c => [(g, s)] -> [(g, s)] @@ -359,20 +379,21 @@ -- Augmentations -augmentations :: Algebra t p g s e c => Preskel t p g s e c -> - t -> Maybe t -> Node -> Set t -> +augmentations :: Algebra t p g s e c => Bool -> Preskel t p g s e c -> + t -> p -> Maybe t -> Node -> Set t -> Cause t p g s e c -> [Preskel t p g s e c] -augmentations k ct ek n escape cause = +augmentations displacement k ct pos ek n escape cause = [ k' | r <- roles (protocol k), - k' <- roleAugs k ct ek n escape cause r ] + k' <- roleAugs displacement k ct pos ek n escape cause r ] -roleAugs :: Algebra t p g s e c => Preskel t p g s e c -> - t -> Maybe t -> Node -> Set t -> Cause t p g s e c -> +roleAugs :: Algebra t p g s e c => Bool -> Preskel t p g s e c -> + t -> p -> Maybe t -> Node -> Set t -> Cause t p g s e c -> Role t p g s e c -> [Preskel t p g s e c] -roleAugs k ct ek n escape cause role = +roleAugs displacement k ct pos ek n escape cause role = [ k' | (subst', inst) <- transformingNode ct escape role subst, - (k', n', subst'') <- augment k n cause role subst' inst, - maybeSolved ct ek escape k' n' subst'' ] + (k', n', subst'') <- + augment displacement k n cause role subst' inst, + maybeSolved ct pos ek escape k' n' subst'' ] where subst = cloneRoleVars (gen k) role @@ -414,8 +435,12 @@ -- term. targetTerms :: Algebra t p g s e c => t -> Set t -> Set t targetTerms ct escape = - S.difference (S.fold f (S.singleton ct) escape) escape + if useEcapeSetInTargetTerms then + targetTermsWithEscapeSet + else + S.difference targetTermsWithEscapeSet escape where + targetTermsWithEscapeSet = S.fold f (S.singleton ct) escape f t ts = foldl (flip S.insert) ts (concatMap (ancestors t) (carriedPlaces ct t)) @@ -475,48 +500,15 @@ inst' = bldInstance role itrace gen itrace = map (evtMap $ substitute subst) (take ht (rtrace role)) --- Contractions with an ordering - -contractionsWithOrdering :: Algebra t p g s e c => Preskel t p g s e c -> - t -> Maybe t -> Node -> Set t -> - Cause t p g s e c -> [Preskel t p g s e c] -contractionsWithOrdering k ct ek n escape cause = - [ k' | (n', t, past) <- copresent k n, - subst <- carriedBindings targets t (gen k, emptySubst), - subst' <- mgus $ cowp ct escape past [subst], - testNotSolved t subst', - (k', n'', subst'') <- - maybeToList $ contractAndOrder k n cause subst' n', - maybeSolved ct ek escape k' n'' subst'' ] - where - targets = S.toList (targetTerms ct escape) - testNotSolved t (_, subst) = - not $ carriedOnlyWithin - (substitute subst ct) - (S.map (substitute subst) escape) - (substitute subst t) - -cowp :: Algebra t p g s e c => t -> Set t -> - [t] -> [(g, s)] -> [(g, s)] -cowp _ _ [] substs = substs -cowp ct escape (t : ts) substs = - cowp ct escape ts (concatMap f substs) - where - f (gen, subst) = - let ct' = substitute subst ct - escape' = S.map (substitute subst) escape - t' = substitute subst t in - cows ct' escape' t' (gen, subst) - -- Listener augmentations addListeners :: Algebra t p g s e c => Preskel t p g s e c -> - t -> Maybe t -> Node -> t -> Set t -> + t -> p -> Maybe t -> Node -> t -> Set t -> Cause t p g s e c -> [Preskel t p g s e c] -addListeners k ct ek n t escape cause = +addListeners k ct pos ek n t escape cause = [ k' | t' <- filter (/= t) (S.toList (escapeKeys ek escape)), (k', n', subst) <- maybeToList $ addListener k n cause t', - maybeSolved ct ek escape k' n' subst ] + maybeSolved ct pos ek escape k' n' subst ] escapeKeys :: Algebra t p g s e c => Maybe t -> Set t -> Set t escapeKeys ek escape = diff --git a/src/CPSA/Lib/Displayer.hs b/src/CPSA/Lib/Displayer.hs --- a/src/CPSA/Lib/Displayer.hs +++ b/src/CPSA/Lib/Displayer.hs @@ -131,8 +131,6 @@ Contracted subst cause -> let substitution = displaySubst ctx subst in displayCause (L () (S () "contracted" : substitution)) cause - AddedOrdering node cause -> - displayCause (L () [S () "added-ordering", displayNode node]) cause Displaced s s' role height cause -> displayCause (L () [S () "displaced", N () s, N () s', S () role, N () height]) diff --git a/src/CPSA/Lib/Loader.hs b/src/CPSA/Lib/Loader.hs --- a/src/CPSA/Lib/Loader.hs +++ b/src/CPSA/Lib/Loader.hs @@ -161,7 +161,7 @@ $ originates t (rtrace role) origVarCheck v = failwith (showString "variable " $ showst v " not acquired") - $ isBaseTerm v || isJust (acquiredPos v (rtrace role)) + $ isAtom v || isJust (acquiredPos v (rtrace role)) failwith :: Monad m => String -> Bool -> m () failwith msg test = @@ -231,7 +231,7 @@ loadBaseTerm vars x = do t <- loadTerm vars x - case isBaseTerm t of + case isAtom t of True -> return t False -> fail (shows (annotation x) "Expecting an atom") @@ -257,7 +257,7 @@ loadPosBaseTerm vars x = do t <- loadTerm vars x - case isBaseTerm t of + case isAtom t of True -> return (Nothing, t) False -> fail (shows (annotation x) "Expecting an atom") diff --git a/src/CPSA/Lib/Main.hs b/src/CPSA/Lib/Main.hs --- a/src/CPSA/Lib/Main.hs +++ b/src/CPSA/Lib/Main.hs @@ -48,6 +48,10 @@ alg :: String, -- Name of the algebra analyze :: Bool, -- False when only expanding macros noIsoChk :: Bool, -- True when not performing isomorphism checks + displacement :: Bool, -- True when using displacement + checkNoncesFirst :: Bool, -- True when checking nonces first + tryOldStrandsFirst :: Bool, -- True when visiting old strands first + tryYoungNodesFirst :: Bool, -- True when visiting young nodes first limit :: Int, -- Step count limit bound :: Int, -- Strand cound bound margin :: Int } -- Output line length @@ -123,6 +127,18 @@ True -> writeComment h m $ "Strand count bounded at " ++ show (bound params) False -> return () + case displacement params of + True -> writeComment h m "Displacement enabled" + False -> return () + case checkNoncesFirst params of + True -> writeComment h m "Nonces checked first" + False -> return () + case tryOldStrandsFirst params of + True -> writeComment h m "Old strands tried first" + False -> return () + case tryYoungNodesFirst params of + True -> writeComment h m "Younger nodes tried first" + False -> return () -- Analyze solve params h preskels 0 @@ -146,6 +162,10 @@ | Margin String -- Output line length | Expand -- Expand macros only | NoIsoChk -- Disable isomorphism checks + | Displacement -- Enable displacement + | CheckNoncesFirst -- Check nonces first + | TryOldStrandsFirst -- Try old strands first + | TryYoungNodesFirst -- Try young nodes first | Algebra String -- Algebra | Algebras -- Show algebras | Help -- Help @@ -165,6 +185,14 @@ "expand macros only; don't analyze", Option ['n'] ["noisochk"] (NoArg NoIsoChk) "disable isomorphism checks", + Option ['d'] ["displacement"] (NoArg Displacement) + "enable displacement", + Option ['c'] ["check-nonces"] (NoArg CheckNoncesFirst) + "check nonces first", + Option ['t'] ["try-old-strands"] (NoArg TryOldStrandsFirst) + "try old strands first", + Option ['r'] ["reverse-nodes"] (NoArg TryYoungNodesFirst) + "try younger nodes first", Option ['a'] ["algebra"] (ReqArg Algebra "STRING") ("algebra (default " ++ defaultAlgebra ++ ")"), Option ['s'] ["show-algebras"] (NoArg Algebras) "show algebras", @@ -178,6 +206,10 @@ alg = defaultAlgebra, analyze = True, noIsoChk = False, + displacement = False, + checkNoncesFirst = False, + tryOldStrandsFirst = False, + tryYoungNodesFirst = False, limit = defaultStepLimit, bound = defaultStrandBound, margin = defaultMargin } @@ -214,6 +246,14 @@ loop flags $ params { analyze = False } loop (NoIsoChk : flags) params = loop flags $ params { noIsoChk = True } + loop (Displacement : flags) params = + loop flags $ params { displacement = True } + loop (CheckNoncesFirst : flags) params = + loop flags $ params { checkNoncesFirst = True } + loop (TryOldStrandsFirst : flags) params = + loop flags $ params { tryOldStrandsFirst = True } + loop (TryYoungNodesFirst : flags) params = + loop flags $ params { tryYoungNodesFirst = True } loop (Algebra name : flags) params | elem name algs = loop flags $ params { alg = name } | otherwise = @@ -406,11 +446,19 @@ Reduct lk (length kids) cols (seqList $ reverse unseen) (seqList dups) where - kids = reduce (noIsoChk p) (content lk) + kids = reduce (params p) (content lk) cols = all collapsed kids (unseen, dups) = foldl (duplicates seen) ([], []) kids +params :: Params -> Mode +params p = + Mode { noGeneralization = noIsoChk p, + addDisplacements = displacement p, + nonceFirstOrder = checkNoncesFirst p, + visitOldStrandsFirst = tryOldStrandsFirst p, + reverseNodeOrder = tryYoungNodesFirst p} + -- Is preskeleton the result of a collapsing operation? collapsed :: Algebra t p g s e c => Preskel t p g s e c -> Bool collapsed k = @@ -470,7 +518,7 @@ fast p h ks m n (lk : todo) = do let ns = unrealized (content lk) - let ks' = reduce (noIsoChk p) (content lk) + let ks' = reduce (params p) (content lk) let msg = show (length ks') ++ " in cohort" wrt p h (commentPreskel lk [] ns (null ns) msg) let (n', todo') = foldl (children lk) (n, []) ks' diff --git a/src/CPSA/Lib/Strand.hs b/src/CPSA/Lib/Strand.hs --- a/src/CPSA/Lib/Strand.hs +++ b/src/CPSA/Lib/Strand.hs @@ -12,10 +12,10 @@ pov, knon, kunique, kcomment, nstrands, kvars, kterms, uniqOrig, preskelWellFormed, verbosePreskelWellFormed, Strand, GraphStrand, nodes, Vertex, GraphNode, preds, event, graphNode, strands, Gist, - gist, contract, contractAndOrder, copresent, augment, inheritRnon, - inheritRunique, addListener, Cause (..), Direction (..), Method - (..), Operation (..), operation, prob, homomorphism, toSkeleton, - generalize, collapse) where + gist, contract, augment, inheritRnon, inheritRunique, addListener, + Cause (..), Direction (..), Method (..), Operation (..), + operation, prob, homomorphism, toSkeleton, generalize, collapse) + where import Control.Monad import qualified Data.List as L @@ -69,10 +69,6 @@ useCheckVars :: Bool useCheckVars = False --- Experiment: try adding displacements to the augmentation procedure. -useDisplacement :: Bool -useDisplacement = False -- True - -- Instances and Strand Identifiers -- An Instance is an instance of a role, in the sense that each @@ -379,7 +375,6 @@ data Algebra t p g s e c => Operation t p g s e c = New | Contracted s (Cause t p g s e c) - | AddedOrdering Node (Cause t p g s e c) | Displaced Int Int String Int (Cause t p g s e c) | AddedStrand String Int (Cause t p g s e c) | AddedListener t (Cause t p g s e c) @@ -830,8 +825,6 @@ substOper _ New = New substOper subst (Contracted s cause) = Contracted (compose subst s) (substCause subst cause) -substOper subst (AddedOrdering node cause) = - AddedOrdering node (substCause subst cause) substOper _ m@(Displaced _ _ _ _ _) = m substOper subst (AddedStrand role height cause) = AddedStrand role height (substCause subst cause) @@ -998,10 +991,24 @@ foldl f orderings (L.delete s (strandids k)) where f orderings s = - case acquiredPos t (trace (strandInst k s)) of + case gainedPos t (trace (strandInst k s)) of Nothing -> orderings Just pos -> adjoin (n, (s, pos)) orderings +-- At what position is a term gained in a trace? +gainedPos :: Algebra t p g s e c => t -> + Trace t p g s e c -> Maybe Int +gainedPos t c = + loop 0 c + where + loop _ [] = Nothing -- Term is not carried + loop pos (Out t' : c) + | t `carriedBy` t' = Nothing -- Term is not gained + | otherwise = loop (pos + 1) c + loop pos (In t' : c) + | t `carriedBy` t' = Just pos -- Found it + | otherwise = loop (pos + 1) c + -- Redundant Strand Elimination (also known as pruning) prune :: Algebra t p g s e c => PRS t p g s e c -> Maybe (PRS t p g s e c) @@ -1032,6 +1039,9 @@ (gen k, emptyEnv) (gen', env') <- idempotentEnvFor env (concatMap (tterms . trace) $ deleteNth s $ insts k) + case matchRenaming (gen', env') of + True -> return () + False -> Nothing case origCheck k env' of True -> return () False -> Nothing @@ -1113,72 +1123,16 @@ n, emptySubst) subst hull True prs --- Contract and add ordering - -contractAndOrder :: Algebra t p g s e c => Preskel t p g s e c -> - Node -> Cause t p g s e c -> (g, s) -> Node -> - Maybe (PRS t p g s e c) -contractAndOrder k n cause subst n' = - do - prs <- ksubst (k { operation = AddedOrdering n' cause }, - n, emptySubst) subst - ord prs (n', n) - -ord :: Algebra t p g s e c => PRS t p g s e c -> - Pair -> Maybe (PRS t p g s e c) -ord (k, n, hsubst) pair = - do - k' <- wellFormedPreskel k' - hull True (k', n, hsubst) - where - k' = newPreskel (gen k) (protocol k) (insts k) - (pair : orderings k) (knon k) (kunique k) - (operation k) (prob k) (pov k) - --- Return a list of triples containg a transmitting node copresent --- with the argument, its message term, and the messages in its past -copresent :: Algebra t p g s e c => Preskel t p g s e c -> - Node -> [(Node, t, [t])] -copresent k n = - map f $ copresentVertices k n - where - f v = - let n = (sid $ strand v, pos v) - t = evtTerm $ event v - past = copresentPast v in - (n, t, past) - -copresentVertices :: Algebra t p g s e c => Preskel t p g s e c -> - Node -> [Vertex t p g s e c] -copresentVertices k n = - let v = vertex k n in - [ v' | s <- strands k, - v' <- nodes s, - outbound $ event v', - not $ graphPrecedes v v', - not $ graphPrecedes v' v ] - -outbound :: Algebra t p g s e c => Event t p g s e c -> Bool -outbound (In _) = False -outbound (Out _) = True - -copresentPast :: Algebra t p g s e c => Vertex t p g s e c -> [t] -copresentPast v = - S.elems $ foldl f S.empty $ preds v - where - f set v = - foldl f (S.insert (evtTerm $ event v) set) $ preds v - -- Regular Augmentation -- Apply a substitution and then augment. Augmentations add an -- instance and one ordered pair. -augment :: Algebra t p g s e c => Preskel t p g s e c -> Node -> - Cause t p g s e c -> Role t p g s e c -> (g, s) -> - Instance t p g s e c -> [PRS t p g s e c] -augment k0 n cause role subst inst = - case substAndAugment k0 n cause role subst inst of +augment :: Algebra t p g s e c => Bool -> Preskel t p g s e c -> + Node -> Cause t p g s e c -> Role t p g s e c -> + (g, s) -> Instance t p g s e c -> [PRS t p g s e c] +augment useDisplacement k0 n cause role subst inst = + case substAndAugment useDisplacement k0 n cause role subst inst of Nothing -> [] Just prs@(k, n, hsubst) -> case useDisplacement of @@ -1188,18 +1142,18 @@ Nothing -> augDisplace k0 k n hsubst Just prs -> prs : augDisplace k0 k n hsubst -substAndAugment :: Algebra t p g s e c => Preskel t p g s e c -> Node -> - Cause t p g s e c -> Role t p g s e c -> (g, s) -> - Instance t p g s e c -> Maybe (PRS t p g s e c) -substAndAugment k n cause role subst inst = +substAndAugment :: Algebra t p g s e c => Bool -> Preskel t p g s e c -> + Node -> Cause t p g s e c -> Role t p g s e c -> + (g, s) -> Instance t p g s e c -> Maybe (PRS t p g s e c) +substAndAugment useDisplacement k n cause role subst inst = do let operation' = AddedStrand (rname role) (height inst) cause prs <- ksubst (k { operation = operation' }, n, emptySubst) subst - aug prs inst + aug useDisplacement prs inst -aug :: Algebra t p g s e c => PRS t p g s e c -> +aug :: Algebra t p g s e c => Bool -> PRS t p g s e c -> Instance t p g s e c -> Maybe (PRS t p g s e c) -aug (k, n, hsubst) inst = +aug useDisplacement (k, n, hsubst) inst = do let insts' = (insts k) ++ [inst] let pair = ((length (insts k), height inst - 1), n) @@ -1235,12 +1189,12 @@ augCollapses :: Algebra t p g s e c => Preskel t p g s e c -> PRS t p g s e c -> Sid -> Maybe (PRS t p g s e c ) augCollapses k0 prs@(k, _, _) s = - foldM f prs (findCollapses k s) - where - f prs s' = + case findCollapses k s of + s':_ -> do (_, _, subst) <- unifyStrands k s s' augSubst k0 prs subst + _ -> return prs -- Find the strands that share an origination point with s findCollapses :: Algebra t p g s e c => Preskel t p g s e c -> Sid -> [Sid] diff --git a/tst/Make.hs b/tst/Make.hs --- a/tst/Make.hs +++ b/tst/Make.hs @@ -186,7 +186,7 @@ make cpsaparametersRule root cpsaparametersRule :: Rule -cpsaparametersRule = +cpsaparametersRule = Rule { prog = "cpsaparameters", inputExt = sourceBasicExt, outputExt = paramsExt } diff --git a/tst/blanchet.tst b/tst/blanchet.tst --- a/tst/blanchet.tst +++ b/tst/blanchet.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol blanchet basic diff --git a/tst/completeness-test.tst b/tst/completeness-test.tst --- a/tst/completeness-test.tst +++ b/tst/completeness-test.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol completeness-test basic diff --git a/tst/dass_simple.tst b/tst/dass_simple.tst --- a/tst/dass_simple.tst +++ b/tst/dass_simple.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol dass basic diff --git a/tst/denning-sacco.tst b/tst/denning-sacco.tst --- a/tst/denning-sacco.tst +++ b/tst/denning-sacco.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol denning-sacco basic diff --git a/tst/dh.tst b/tst/dh.tst --- a/tst/dh.tst +++ b/tst/dh.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol dhke diffie-hellman diff --git a/tst/dh_unifywithconst.sch b/tst/dh_unifywithconst.sch new file mode 100644 --- /dev/null +++ b/tst/dh_unifywithconst.sch @@ -0,0 +1,25 @@ +(defprotocol dh_unifywith1 diffie-hellman + (defrole resp (vars (n text) (x base) (a b name)) + (trace + (recv (enc n (pubk b))) + (send (enc x n (pubk a))) + ) + (uniq-orig x) + (non-orig (privk a)) + ) + (defrole init (vars (n text) (a b name)) + (trace + (send (enc n (pubk b))) + (recv (enc (gen) n (pubk a))) + ) + (non-orig (privk b)) + (uniq-orig n) + ) + (comment "A test: will CPSA unify x with g?") +) + +(defskeleton dh_unifywith1 + (vars (n text) (a b name)) + (defstrand init 2 (n n) (a a) (b b)) + (comment "Initiator full point of view") +) diff --git a/tst/dh_unifywithconst.tst b/tst/dh_unifywithconst.tst new file mode 100644 --- /dev/null +++ b/tst/dh_unifywithconst.tst @@ -0,0 +1,59 @@ +(comment "CPSA 2.1.0") +(comment "All input read") + +(defprotocol dh_unifywith1 diffie-hellman + (defrole resp + (vars (n text) (x base) (a b name)) + (trace (recv (enc n (pubk b))) (send (enc x n (pubk a)))) + (non-orig (privk a)) + (uniq-orig x)) + (defrole init + (vars (n text) (a b name)) + (trace (send (enc n (pubk b))) (recv (enc (gen) n (pubk a)))) + (non-orig (privk b)) + (uniq-orig n)) + (comment "A test: will CPSA unify x with g?")) + +(defskeleton dh_unifywith1 + (vars (n text) (a b name)) + (defstrand init 2 (n n) (a a) (b b)) + (non-orig (privk b)) + (uniq-orig n) + (comment "Initiator full point of view") + (traces ((send (enc n (pubk b))) (recv (enc (gen) n (pubk a))))) + (label 0) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton dh_unifywith1 + (vars (n text) (a b a-0 name) (x base)) + (defstrand init 2 (n n) (a a) (b b)) + (defstrand resp 2 (n n) (a a-0) (b b) (x x)) + (precedes ((0 0) (1 0)) ((1 1) (0 1))) + (non-orig (privk b) (privk a-0)) + (uniq-orig n x) + (operation nonce-test (added-strand resp 2) n (0 1) (enc n (pubk b))) + (traces ((send (enc n (pubk b))) (recv (enc (gen) n (pubk a)))) + ((recv (enc n (pubk b))) (send (enc x n (pubk a-0))))) + (label 1) + (parent 0) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton dh_unifywith1 + (vars (n text) (b a name)) + (defstrand init 2 (n n) (a a) (b b)) + (defstrand resp 2 (n n) (a a) (b b) (x (gen))) + (precedes ((0 0) (1 0)) ((1 1) (0 1))) + (non-orig (privk b) (privk a)) + (uniq-orig n (gen)) + (operation nonce-test (contracted (a-0 a) (x (gen))) n (0 1) + (enc n (pubk b)) (enc (gen) n (pubk a))) + (traces ((send (enc n (pubk b))) (recv (enc (gen) n (pubk a)))) + ((recv (enc n (pubk b))) (send (enc (gen) n (pubk a))))) + (label 2) + (parent 1) + (unrealized) + (shape)) + +(comment "Nothing left to do") diff --git a/tst/dy.tst b/tst/dy.tst --- a/tst/dy.tst +++ b/tst/dy.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol dy basic diff --git a/tst/encsig.tst b/tst/encsig.tst --- a/tst/encsig.tst +++ b/tst/encsig.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol mult-keys-enc-sig basic diff --git a/tst/epmo.tst b/tst/epmo.tst --- a/tst/epmo.tst +++ b/tst/epmo.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol epmo basic diff --git a/tst/epmo_acctnum.tst b/tst/epmo_acctnum.tst --- a/tst/epmo_acctnum.tst +++ b/tst/epmo_acctnum.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol epmo_acctnum basic diff --git a/tst/ffgg.tst b/tst/ffgg.tst --- a/tst/ffgg.tst +++ b/tst/ffgg.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol ffgg basic diff --git a/tst/isoreject.tst b/tst/isoreject.tst --- a/tst/isoreject.tst +++ b/tst/isoreject.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol isoreject basic diff --git a/tst/kelly1.tst b/tst/kelly1.tst --- a/tst/kelly1.tst +++ b/tst/kelly1.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol kelly1 basic diff --git a/tst/kerberos.tst b/tst/kerberos.tst --- a/tst/kerberos.tst +++ b/tst/kerberos.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol kerberos basic @@ -297,37 +297,6 @@ (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) (k k)) (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k)) - (defstrand resp 2 (t t) (t-prime t-prime) (l l-0) (a a) (b b-0) - (ks ks-0) (k k)) - (defstrand init 3 (t t) (l l) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (0 1)) ((1 1) (3 1)) ((2 1) (0 3)) ((3 2) (2 0))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig k) - (operation nonce-test - (contracted (a-0 a) (t-0 t) (b-1 b) (ks-1 ks) (l-1 l)) k (3 1) - (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))) - (traces - ((send (cat a b)) - (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) - (send (cat (enc a t k) (enc t l k a (ltk b ks)))) - (recv (enc t-prime k))) - ((recv (cat b a)) - (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))) - ((recv (cat (enc a t k) (enc t l-0 k a (ltk b-0 ks-0)))) - (send (enc t-prime k))) - ((send (cat a b)) - (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) - (send (cat (enc a t k) (enc t l k a (ltk b ks)))))) - (label 11) - (parent 7) - (unrealized (2 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton kerberos - (vars (t t-prime l l-0 text) (a b ks b-0 ks-0 name) (k skey)) - (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) - (k k)) - (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k)) (defstrand resp 2 (t t) (t-prime t-prime) (l l-0) (a b) (b b-0) (ks ks-0) (k k)) (defstrand init 3 (t t) (l l) (a b) (b a) (ks ks) (k k)) @@ -349,7 +318,7 @@ ((send (cat b a)) (recv (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))) (send (cat (enc b t k) (enc t l k b (ltk a ks)))))) - (label 12) + (label 11) (parent 7) (unrealized (2 0)) (comment "1 in cohort - 1 not yet seen")) @@ -358,7 +327,7 @@ (vars (t t-prime l l-0 text) (a b ks b-0 ks-0 name) (k skey)) (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (t t) (l l) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k)) (defstrand resp 2 (t t) (t-prime t-prime) (l l-0) (a a) (b b-0) (ks ks-0) (k k)) (defstrand init 3 (t t) (l l) (a a) (b b) (ks ks) (k k)) @@ -373,15 +342,15 @@ (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) (send (cat (enc a t k) (enc t l k a (ltk b ks)))) (recv (enc t-prime k))) - ((recv (cat a b)) - (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))) + ((recv (cat b a)) + (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))) ((recv (cat (enc a t k) (enc t l-0 k a (ltk b-0 ks-0)))) (send (enc t-prime k))) ((send (cat a b)) (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) (send (cat (enc a t k) (enc t l k a (ltk b ks)))))) - (label 13) - (parent 9) + (label 12) + (parent 7) (unrealized (2 0)) (comment "1 in cohort - 1 not yet seen")) @@ -411,40 +380,40 @@ ((send (cat b a)) (recv (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))) (send (cat (enc b t k) (enc t l k b (ltk a ks)))))) - (label 14) + (label 13) (parent 9) (unrealized (2 0)) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos - (vars (t t-prime l text) (a b ks name) (k skey)) + (vars (t t-prime l l-0 text) (a b ks b-0 ks-0 name) (k skey)) (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k)) - (defstrand resp 2 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) - (k k)) + (defstrand keyserver 2 (t t) (l l) (a a) (b b) (ks ks) (k k)) + (defstrand resp 2 (t t) (t-prime t-prime) (l l-0) (a a) (b b-0) + (ks ks-0) (k k)) (defstrand init 3 (t t) (l l) (a a) (b b) (ks ks) (k k)) (precedes ((1 1) (0 1)) ((1 1) (3 1)) ((2 1) (0 3)) ((3 2) (2 0))) (non-orig (ltk a ks) (ltk b ks)) (uniq-orig k) - (operation nonce-test (contracted (b-0 b) (ks-0 ks) (l-0 l)) k (2 0) + (operation nonce-test + (contracted (a-0 a) (t-0 t) (b-1 b) (ks-1 ks) (l-1 l)) k (3 1) (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))) (traces ((send (cat a b)) (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) (send (cat (enc a t k) (enc t l k a (ltk b ks)))) (recv (enc t-prime k))) - ((recv (cat b a)) - (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))) - ((recv (cat (enc a t k) (enc t l k a (ltk b ks)))) + ((recv (cat a b)) + (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))) + ((recv (cat (enc a t k) (enc t l-0 k a (ltk b-0 ks-0)))) (send (enc t-prime k))) ((send (cat a b)) (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) (send (cat (enc a t k) (enc t l k a (ltk b ks)))))) - (label 15) - (parent 11) - (unrealized) - (shape) + (label 14) + (parent 9) + (unrealized (2 0)) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos @@ -472,8 +441,8 @@ ((send (cat b a)) (recv (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))) (send (cat (enc b t k) (enc t l k b (ltk a ks)))))) - (label 16) - (parent 12) + (label 15) + (parent 11) (unrealized) (shape) (comment "1 in cohort - 1 not yet seen")) @@ -482,7 +451,7 @@ (vars (t t-prime l text) (a b ks name) (k skey)) (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (t t) (l l) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k)) (defstrand resp 2 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) (k k)) (defstrand init 3 (t t) (l l) (a a) (b b) (ks ks) (k k)) @@ -496,15 +465,15 @@ (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) (send (cat (enc a t k) (enc t l k a (ltk b ks)))) (recv (enc t-prime k))) - ((recv (cat a b)) - (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))) + ((recv (cat b a)) + (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))) ((recv (cat (enc a t k) (enc t l k a (ltk b ks)))) (send (enc t-prime k))) ((send (cat a b)) (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) (send (cat (enc a t k) (enc t l k a (ltk b ks)))))) - (label 17) - (parent 13) + (label 16) + (parent 12) (unrealized) (shape) (comment "1 in cohort - 1 not yet seen")) @@ -534,9 +503,9 @@ ((send (cat b a)) (recv (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))) (send (cat (enc b t k) (enc t l k b (ltk a ks)))))) - (label 18) - (parent 14) - (seen 20) + (label 17) + (parent 13) + (seen 19) (unrealized) (shape) (comment "1 in cohort - 0 not yet seen")) @@ -545,26 +514,32 @@ (vars (t t-prime l text) (a b ks name) (k skey)) (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k)) + (defstrand keyserver 2 (t t) (l l) (a a) (b b) (ks ks) (k k)) (defstrand resp 2 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) (k k)) - (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) + (defstrand init 3 (t t) (l l) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (0 1)) ((1 1) (3 1)) ((2 1) (0 3)) ((3 2) (2 0))) (non-orig (ltk a ks) (ltk b ks)) (uniq-orig k) - (operation collapsed 3 0) + (operation nonce-test (contracted (b-0 b) (ks-0 ks) (l-0 l)) k (2 0) + (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))) (traces ((send (cat a b)) (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) (send (cat (enc a t k) (enc t l k a (ltk b ks)))) (recv (enc t-prime k))) - ((recv (cat b a)) - (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))) + ((recv (cat a b)) + (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))) ((recv (cat (enc a t k) (enc t l k a (ltk b ks)))) - (send (enc t-prime k)))) - (label 19) - (parent 15) + (send (enc t-prime k))) + ((send (cat a b)) + (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) + (send (cat (enc a t k) (enc t l k a (ltk b ks)))))) + (label 18) + (parent 14) (unrealized) - (shape)) + (shape) + (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos (vars (t t-prime l text) (a ks name) (k skey)) @@ -586,8 +561,8 @@ (send (cat (enc t l k a (ltk a ks)) (enc t l k a (ltk a ks))))) ((recv (cat (enc a t k) (enc t l k a (ltk a ks)))) (send (enc t-prime k)))) - (label 20) - (parent 16) + (label 19) + (parent 15) (seen 21) (unrealized) (comment "1 in cohort - 0 not yet seen")) @@ -596,6 +571,31 @@ (vars (t t-prime l text) (a b ks name) (k skey)) (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k)) + (defstrand resp 2 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) + (k k)) + (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig k) + (operation collapsed 3 0) + (traces + ((send (cat a b)) + (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))) + (send (cat (enc a t k) (enc t l k a (ltk b ks)))) + (recv (enc t-prime k))) + ((recv (cat b a)) + (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))) + ((recv (cat (enc a t k) (enc t l k a (ltk b ks)))) + (send (enc t-prime k)))) + (label 20) + (parent 16) + (unrealized) + (shape)) + +(defskeleton kerberos + (vars (t t-prime l text) (a b ks name) (k skey)) + (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) + (k k)) (defstrand keyserver 2 (t t) (l l) (a a) (b b) (ks ks) (k k)) (defstrand resp 2 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks) (k k)) @@ -613,7 +613,7 @@ ((recv (cat (enc a t k) (enc t l k a (ltk b ks)))) (send (enc t-prime k)))) (label 21) - (parent 17) + (parent 18) (unrealized) (shape)) diff --git a/tst/missing_contraction.scm b/tst/missing_contraction.scm --- a/tst/missing_contraction.scm +++ b/tst/missing_contraction.scm @@ -1,12 +1,12 @@ (defprotocol missing-contraction basic (defrole sender (vars (m n text) (a b name)) - (trace + (trace (send (enc a m (pubk a))) (send (enc a n (pubk b))))) (defrole receiver (vars (m text) (a b name)) - (trace + (trace (recv (enc a m (pubk b)))))) (defskeleton missing-contraction @@ -23,3 +23,12 @@ (deflistener (enc a m (pubk c))) (uniq-orig m) (non-orig (privk a))) + + +(defskeleton missing-contraction + (vars (m text) (a b c name)) + (defstrand sender 2 (m m) (a a) (b b)) + (defstrand receiver 1 (m m) (a a) (b c)) + (precedes ((0 1) (1 0))) + (uniq-orig m) + (non-orig (privk a) (privk b))) diff --git a/tst/missing_contraction.tst b/tst/missing_contraction.tst --- a/tst/missing_contraction.tst +++ b/tst/missing_contraction.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol missing-contraction basic @@ -118,5 +118,92 @@ (parent 4) (unrealized) (shape)) + +(comment "Nothing left to do") + +(defprotocol missing-contraction basic + (defrole sender + (vars (m n text) (a b name)) + (trace (send (enc a m (pubk a))) (send (enc a n (pubk b))))) + (defrole receiver + (vars (m text) (a b name)) + (trace (recv (enc a m (pubk b)))))) + +(defskeleton missing-contraction + (vars (m n text) (a b c name)) + (defstrand sender 2 (m m) (n n) (a a) (b b)) + (defstrand receiver 1 (m m) (a a) (b c)) + (precedes ((0 1) (1 0))) + (non-orig (privk a) (privk b)) + (uniq-orig m) + (traces ((send (enc a m (pubk a))) (send (enc a n (pubk b)))) + ((recv (enc a m (pubk c))))) + (label 7) + (unrealized (1 0)) + (comment "2 in cohort - 2 not yet seen")) + +(defskeleton missing-contraction + (vars (m n text) (a b name)) + (defstrand sender 2 (m m) (n n) (a a) (b b)) + (defstrand receiver 1 (m m) (a a) (b a)) + (precedes ((0 1) (1 0))) + (non-orig (privk a) (privk b)) + (uniq-orig m) + (operation nonce-test (contracted (c a)) m (1 0) (enc a m (pubk a))) + (traces ((send (enc a m (pubk a))) (send (enc a n (pubk b)))) + ((recv (enc a m (pubk a))))) + (label 8) + (parent 7) + (unrealized) + (shape)) + +(defskeleton missing-contraction + (vars (n text) (a b c name)) + (defstrand sender 2 (m n) (n n) (a a) (b b)) + (defstrand receiver 1 (m n) (a a) (b c)) + (precedes ((0 1) (1 0))) + (non-orig (privk a) (privk b)) + (uniq-orig n) + (operation nonce-test (added-strand sender 2) n (1 0) + (enc a n (pubk a))) + (traces ((send (enc a n (pubk a))) (send (enc a n (pubk b)))) + ((recv (enc a n (pubk c))))) + (label 9) + (parent 7) + (unrealized (1 0)) + (comment "2 in cohort - 2 not yet seen")) + +(defskeleton missing-contraction + (vars (n text) (a b name)) + (defstrand sender 2 (m n) (n n) (a a) (b b)) + (defstrand receiver 1 (m n) (a a) (b b)) + (precedes ((0 1) (1 0))) + (non-orig (privk a) (privk b)) + (uniq-orig n) + (operation nonce-test (contracted (c b)) n (1 0) (enc a n (pubk a)) + (enc a n (pubk b))) + (traces ((send (enc a n (pubk a))) (send (enc a n (pubk b)))) + ((recv (enc a n (pubk b))))) + (label 10) + (parent 9) + (unrealized) + (shape)) + +(defskeleton missing-contraction + (vars (n text) (a b name)) + (defstrand sender 2 (m n) (n n) (a a) (b b)) + (defstrand receiver 1 (m n) (a a) (b a)) + (precedes ((0 1) (1 0))) + (non-orig (privk a) (privk b)) + (uniq-orig n) + (operation nonce-test (contracted (c a)) n (1 0) (enc a n (pubk a)) + (enc a n (pubk b))) + (traces ((send (enc a n (pubk a))) (send (enc a n (pubk b)))) + ((recv (enc a n (pubk a))))) + (label 11) + (parent 9) + (seen 8) + (unrealized) + (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do") diff --git a/tst/neuman-stubblebine-reauth.tst b/tst/neuman-stubblebine-reauth.tst --- a/tst/neuman-stubblebine-reauth.tst +++ b/tst/neuman-stubblebine-reauth.tst @@ -1,4424 +1,3812 @@ -(comment "CPSA 2.0.5") -(comment "All input read") - -(defprotocol neuman-stubblebine basic - (defrole init - (vars (a b ks name) (ra rb text) (k skey) (tb text)) - (trace (send (cat a ra)) - (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) - (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) - (defrole resp - (vars (a b ks name) (ra rb text) (k skey) (tb text)) - (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))) - (defrole init-reauth - (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text)) - (trace (recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime)) - (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))) - (defrole resp-reauth - (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text)) - (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))) - (defrole keyserver - (vars (a b ks name) (ra rb text) (k skey) (tb text)) - (trace (recv (cat b rb (enc a ra tb (ltk b ks)))) - (send - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) - (uniq-orig k))) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))) - (label 0) - (unrealized (0 2) (1 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text) (a b ks name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (precedes ((2 1) (0 2)) ((2 1) (1 0))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand keyserver 2) - (enc a k tb-0 (ltk b ks)) (1 0)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0)))) - (label 1) - (parent 0) - (unrealized (0 2) (1 2) (2 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp 2) - (enc a ra-0 tb-0 (ltk b ks)) (2 0)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))) - (label 2) - (parent 1) - (unrealized (0 2) (1 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text) - (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) - ((4 2) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc rb-prime k) - (1 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0)) - (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime)) - (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k))))) - (label 3) - (parent 2) - (unrealized (0 2) (4 1)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 tb-1 - text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((3 1) (2 0)) ((4 3) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) - (enc rb-prime k) (1 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a-0 k tb-1 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))) - (label 4) - (parent 2) - (unrealized (0 2) (4 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 tb-1 - text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) - ((4 1) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) - (enc rb-prime k) (1 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k))))) - (label 5) - (parent 2) - (unrealized (0 2) (4 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (deflistener k) - (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0)) - ((4 1) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc rb-prime k) (1 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv k) (send k))) - (label 6) - (parent 2) - (unrealized (0 2) (4 0)) - (comment "empty cohort")) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) - ((4 2) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-1 tb-0)) k - (4 1) (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k))))) - (label 7) - (parent 3) - (unrealized (0 2)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((3 1) (2 0)) ((4 3) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0) - (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))) - (label 8) - (parent 4) - (unrealized (0 2) (4 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) - ((4 1) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0) - (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k))))) - (label 9) - (parent 5) - (unrealized (0 2)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) - ((4 2) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand keyserver 2) - (enc a k tb (ltk b ks)) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))) - (label 10) - (parent 7) - (unrealized (0 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-1 - text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-1) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc ra-prime-0 k) - (4 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0)) - (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0)) - (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-0 k))))) - (label 11) - (parent 8) - (unrealized (0 2) (5 1)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) - (enc ra-prime-0 k) (4 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a-0 k tb-1 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k)))) - (label 12) - (parent 8) - (unrealized (0 2) (5 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) - (enc ra-prime-0 k) (4 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k))))) - (label 13) - (parent 8) - (unrealized (0 2) (5 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (deflistener k) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc ra-prime-0 k) - (4 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv k) (send k))) - (label 14) - (parent 8) - (unrealized (0 2) (5 0)) - (comment "empty cohort")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) - ((4 1) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand keyserver 2) - (enc a k tb (ltk b ks)) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k))))) - (label 15) - (parent 9) - (unrealized (0 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text) - (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1)) - ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) - (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k))))) - (label 16) - (parent 10) - (unrealized (5 1)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text) - (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))) - (label 17) - (parent 10) - (unrealized (5 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text) - (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat rb-prime-0 (enc rb k))))) - (label 18) - (parent 10) - (unrealized (5 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (deflistener k) - (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0)) - ((4 2) (1 2)) ((5 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv k) (send k))) - (label 19) - (parent 10) - (unrealized (5 0)) - (comment "empty cohort")) - -(defskeleton neuman-stubblebine - (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-1 tb-0)) k - (5 1) (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k))))) - (label 20) - (parent 11) - (unrealized (0 2)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0) - (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k)))) - (label 21) - (parent 12) - (unrealized (0 2) (5 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - rb-prime-0 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0) - (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k))))) - (label 22) - (parent 13) - (unrealized (0 2)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 tb-0 - text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1)) - ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) - (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k))))) - (label 23) - (parent 15) - (unrealized (5 1)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 - tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))) - (label 24) - (parent 15) - (unrealized (5 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1 - tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat rb-prime-1 (enc rb k))))) - (label 25) - (parent 15) - (unrealized (5 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (deflistener k) - (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0)) - ((4 1) (1 2)) ((5 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k))) - (label 26) - (parent 15) - (unrealized (5 0)) - (comment "empty cohort")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1)) - ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (5 1) - (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) - (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) - (label 27) - (parent 16) - (unrealized) - (shape)) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))) - (label 28) - (parent 17) - (unrealized (5 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (cat (enc a k tb (ltk b ks)) rb)) - (send (cat rb-prime-0 (enc rb k))))) - (label 29) - (parent 18) - (unrealized) - (shape) - (comment "2 in cohort - 2 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand keyserver 2) - (enc a k tb (ltk b ks)) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))) - (label 30) - (parent 20) - (unrealized (0 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-1) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 2) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc ra-prime-1 k) - (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0)) - (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1)) - (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-1 k))))) - (label 31) - (parent 21) - (unrealized (0 2) (6 1)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 ra-prime-2 tb-1 text) (a b ks a-0 b-0 ks-0 name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) - (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 3) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) - (enc ra-prime-1 k) (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (enc a-0 k tb-1 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2)) - (recv (cat ra-prime-1 (enc ra-prime-2 k))) - (send (enc ra-prime-1 k)))) - (label 32) - (parent 21) - (unrealized (0 2) (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0) - (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) - (enc ra-prime-1 k) (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1)) - (send (cat rb-prime-0 (enc ra-prime-1 k))))) - (label 33) - (parent 21) - (unrealized (0 2) (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (deflistener k) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc ra-prime-1 k) - (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) ((recv k) (send k))) - (label 34) - (parent 21) - (unrealized (0 2) (6 0)) - (comment "empty cohort")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand keyserver 2) - (enc a k tb (ltk b ks)) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k))))) - (label 35) - (parent 22) - (unrealized (0 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1)) - ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (5 1) - (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) - (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) - (label 36) - (parent 23) - (unrealized) - (shape) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))) - (label 37) - (parent 24) - (unrealized (5 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (cat (enc a k tb (ltk b ks)) rb)) - (send (cat rb-prime-1 (enc rb k))))) - (label 38) - (parent 25) - (unrealized) - (shape) - (comment "2 in cohort - 2 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0 - text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) - ((6 2) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc ra-prime-0 k) - (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) - (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k))))) - (label 39) - (parent 28) - (unrealized (6 1)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) - ((6 3) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) - (enc ra-prime-0 k) (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k)))) - (label 40) - (parent 28) - (unrealized (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) - ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) - (enc ra-prime-0 k) (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k))))) - (label 41) - (parent 28) - (unrealized (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (deflistener k) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) - ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc ra-prime-0 k) - (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv k) (send k))) - (label 42) - (parent 28) - (unrealized (6 0)) - (comment "empty cohort")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb rb-0 rb-prime-0 text) (a b ks name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0)) - ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation collapsed 3 0) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra tb (ltk b ks)))) - (send - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))) - ((send (cat a ra)) - (recv - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (cat (enc a k tb (ltk b ks)) rb)) - (send (cat rb-prime-0 (enc rb k))))) - (label 43) - (parent 29) - (unrealized) - (shape) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 text) (a b ks name) - (k skey)) - (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0)) - ((3 1) (2 0)) ((4 2) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra ra-prime rb-prime k) - (operation collapsed 5 1) - (traces - ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) - ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))) - (label 44) - (parent 29) - (seen 66) - (unrealized) - (shape) - (comment "1 in cohort - 0 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0 - text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 2) (4 2)) ((6 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) - (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k))))) - (label 45) - (parent 30) - (unrealized (6 1)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 2) (4 2)) ((6 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) - (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))) - (label 46) - (parent 30) - (unrealized (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 2) (4 2)) ((6 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat rb-prime-0 (enc rb k))))) - (label 47) - (parent 30) - (unrealized (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (deflistener k) - (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)) - ((6 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv k) (send k))) - (label 48) - (parent 30) - (unrealized (6 0)) - (comment "empty cohort")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 2) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-1 tb-0)) k - (6 1) (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - ra-prime-1)) - (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k))))) - (label 49) - (parent 31) - (unrealized (0 2)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 ra-prime-2 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 3) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0) - (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) - (recv (cat ra-prime-1 (enc ra-prime-2 k))) - (send (enc ra-prime-1 k)))) - (label 50) - (parent 32) - (unrealized (0 2) (6 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 rb-prime-0 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0) - (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (send (cat rb-prime-0 (enc ra-prime-1 k))))) - (label 51) - (parent 33) - (unrealized (0 2)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 1) (4 2)) ((6 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k)))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) - (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k))))) - (label 52) - (parent 35) - (unrealized (6 1)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 1) (4 2)) ((6 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k)))) - ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) - (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))) - (label 53) - (parent 35) - (unrealized (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 1) (4 2)) ((6 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k)))) - ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat rb-prime-1 (enc rb k))))) - (label 54) - (parent 35) - (unrealized (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (deflistener k) - (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)) - ((6 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k))) - (label 55) - (parent 35) - (unrealized (6 0)) - (comment "empty cohort")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb rb-0 rb-prime-0 text) (a b ks name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1)) - ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation collapsed 3 0) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra tb (ltk b ks)))) - (send - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((send (cat a ra)) - (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) - (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) - (label 56) - (parent 36) - (unrealized) - (shape)) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 - ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) - ((6 2) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc ra-prime-0 k) - (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) - (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k))))) - (label 57) - (parent 37) - (unrealized (6 1)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 - ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) - ((6 3) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) - (enc ra-prime-0 k) (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k)))) - (label 58) - (parent 37) - (unrealized (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 - rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1) - (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) - ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) - (enc ra-prime-0 k) (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) - (send (cat rb-prime-1 (enc ra-prime-0 k))))) - (label 59) - (parent 37) - (unrealized (6 0)) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (deflistener k) - (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) - ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc ra-prime-0 k) - (5 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv k) (send k))) - (label 60) - (parent 37) - (unrealized (6 0)) - (comment "empty cohort")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb rb-0 rb-prime-0 rb-prime-1 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0)) - ((3 1) (1 2)) ((4 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation collapsed 3 0) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra tb (ltk b ks)))) - (send - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (cat (enc a k tb (ltk b ks)) rb)) - (send (cat rb-prime-1 (enc rb k))))) - (label 61) - (parent 38) - (unrealized) - (shape) - (comment "1 in cohort - 1 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0)) - ((3 1) (2 0)) ((4 1) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra ra-prime rb-prime k) - (operation collapsed 5 1) - (traces - ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) - ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k))))) - (label 62) - (parent 38) - (seen 82) - (unrealized) - (shape) - (comment "1 in cohort - 0 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) - ((6 2) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (6 1) - (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))) - (label 63) - (parent 39) - (unrealized) - (shape)) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) - ((6 3) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k)))) - (label 64) - (parent 40) - (unrealized (6 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) - ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k))))) - (label 65) - (parent 41) - (unrealized) - (shape) - (comment "2 in cohort - 2 not yet seen")) - -(defskeleton neuman-stubblebine - (vars (ra ra-prime rb-prime tb rb text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0)) - ((3 0) (0 0)) ((3 2) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra ra-prime rb-prime k) - (operation collapsed 4 1) - (traces - ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb (enc a ra tb (ltk b ks)))) - (send - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) - ((send (cat a ra)) - (recv - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))) - (label 66) - (parent 43) - (unrealized) - (shape)) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 2) (4 2)) ((6 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (6 1) - (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) - (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) - (label 67) - (parent 45) - (unrealized) - (shape)) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 2) (4 2)) ((6 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))) - (label 68) - (parent 46) - (unrealized (6 2)) - (comment "4 in cohort - 4 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 2) (4 2)) ((6 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv (cat (enc a k tb (ltk b ks)) rb)) - (send (cat rb-prime-0 (enc rb k))))) - (label 69) - (parent 47) - (unrealized) - (shape) - (comment "2 in cohort - 2 not yet seen")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b) - (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 2) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand keyserver 2) - (enc a k tb (ltk b ks)) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-1)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))) - (label 70) - (parent 49) - (unrealized (0 2)) - (comment "4 in cohort - 4 not yet seen")) - -(comment "Strand bound exceeded--aborting run") - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 ra-prime-2 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb ra-prime-2) (tb tb-1) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc ra-prime-2 k) - (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) - (recv (cat ra-prime-1 (enc ra-prime-2 k))) - (send (enc ra-prime-1 k))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0)) - (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2)) - (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-2 k))))) - (label 71) - (parent 50) - (unrealized (0 2) (7 1)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 ra-prime-2 ra-prime-3 tb-1 text) - (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2) - (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) - (enc ra-prime-2 k) (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) - (recv (cat ra-prime-1 (enc ra-prime-2 k))) - (send (enc ra-prime-1 k))) - ((recv (enc a-0 k tb-1 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-3)) - (recv (cat ra-prime-2 (enc ra-prime-3 k))) - (send (enc ra-prime-2 k)))) - (label 72) - (parent 50) - (unrealized (0 2) (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 ra-prime-2 rb-prime-0 tb-1 text) - (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0) - (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) - (enc ra-prime-2 k) (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) - (recv (cat ra-prime-1 (enc ra-prime-2 k))) - (send (enc ra-prime-1 k))) - ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2)) - (send (cat rb-prime-0 (enc ra-prime-2 k))))) - (label 73) - (parent 50) - (unrealized (0 2) (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 - ra-prime-1 ra-prime-2 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) - (ks ks) (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) - (tb tb-0) (a a) (b b) (ks ks) (k k)) - (deflistener k) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc ra-prime-2 k) - (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) - (send - (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) - (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (enc a k tb-0 (ltk b ks))) - (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) - (recv (cat ra-prime-1 (enc ra-prime-2 k))) - (send (enc ra-prime-1 k))) ((recv k) (send k))) - (label 74) - (parent 50) - (unrealized (0 2) (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - rb-prime-0 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand keyserver 2) - (enc a k tb (ltk b ks)) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (send (cat rb-prime-0 (enc ra-prime-1 k))))) - (label 75) - (parent 51) - (unrealized (0 2)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 1) (4 2)) ((6 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (6 1) - (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k)))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) - (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) - (label 76) - (parent 52) - (unrealized) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - ra-prime-1 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 1) (4 2)) ((6 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))) - (label 77) - (parent 53) - (unrealized (6 2)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 - rb-prime-1 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 1) (4 2)) ((6 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k)))) - ((recv (cat (enc a k tb (ltk b ks)) rb)) - (send (cat rb-prime-1 (enc rb k))))) - (label 78) - (parent 54) - (unrealized) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) - ((6 2) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (6 1) - (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))) - (label 79) - (parent 57) - (unrealized) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 - ra-prime-1 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) - ((6 3) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k)))) - (label 80) - (parent 58) - (unrealized (6 2)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 - rb-prime-1 text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) - ((6 1) (5 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) - k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-1 (enc ra-prime-0 k))))) - (label 81) - (parent 59) - (unrealized) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars (ra ra-prime rb-prime tb rb rb-prime-0 text) (a b ks name) - (k skey)) - (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0)) - ((3 1) (1 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra ra-prime rb-prime k) - (operation collapsed 4 1) - (traces - ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb (enc a ra tb (ltk b ks)))) - (send - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) - ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) - (send (cat rb-prime-0 (enc rb-prime k))))) - (label 82) - (parent 61) - (unrealized) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 2) (1 2)) - ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc ra-prime-1 k) - (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) - (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k))))) - (label 83) - (parent 64) - (unrealized (7 1)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) - (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2)) - ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) - (enc ra-prime-1 k) (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2)) - (recv (cat ra-prime-1 (enc ra-prime-2 k))) - (send (enc ra-prime-1 k)))) - (label 84) - (parent 64) - (unrealized (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0) - (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2)) - ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) - (enc ra-prime-1 k) (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) - (send (cat rb-prime-0 (enc ra-prime-1 k))))) - (label 85) - (parent 64) - (unrealized (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (deflistener k) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) - ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2)) - ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc ra-prime-1 k) - (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) ((recv k) (send k))) - (label 86) - (parent 64) - (unrealized (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb rb-0 ra-prime-0 rb-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)) - ((5 1) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation collapsed 3 0) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra tb (ltk b ks)))) - (send - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))) - ((send (cat a ra)) - (recv - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (send (cat rb-prime-0 (enc ra-prime-0 k))))) - (label 87) - (parent 65) - (unrealized) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name) - (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (5 2)) ((2 1) (5 0)) - ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (1 0)) ((5 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation collapsed 6 1) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-prime)) - (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime)) - (recv (cat rb (enc ra-prime k))) (send (enc rb k)))) - (label 88) - (parent 65) - (unrealized) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 2) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc ra-prime-1 k) - (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) - (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k))))) - (label 89) - (parent 68) - (unrealized (7 1)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) - (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 3) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) - (enc ra-prime-1 k) (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))) - ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2)) - (recv (cat ra-prime-1 (enc ra-prime-2 k))) - (send (enc ra-prime-1 k)))) - (label 90) - (parent 68) - (unrealized (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0) - (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) - (enc ra-prime-1 k) (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))) - ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) - (send (cat rb-prime-0 (enc ra-prime-1 k))))) - (label 91) - (parent 68) - (unrealized (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb) - (a a) (b b) (ks ks) (k k)) - (deflistener k) - (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc ra-prime-1 k) - (6 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))) - ((recv k) (send k))) - (label 92) - (parent 68) - (unrealized (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars (ra rb ra-prime rb-prime tb rb-0 ra-prime-0 rb-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb) - (a a) (b b) (ks ks) (k k)) - (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0)) - ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0)) - ((4 2) (3 2)) ((5 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation collapsed 3 0) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra tb (ltk b ks)))) - (send - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra)) - (recv - (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) - ((recv (cat (enc a k tb (ltk b ks)) rb)) - (send (cat rb-prime-0 (enc rb k))))) - (label 93) - (parent 69) - (unrealized) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 text) - (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) - (ks ks) (k k)) - (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0)) - ((2 1) (4 0)) ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 2) (4 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra ra-prime rb-prime k) - (operation collapsed 6 1) - (traces - ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) - ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-0)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))) - (label 94) - (parent 69) - (unrealized) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0) - (ks ks-0) (k k)) - (precedes ((0 1) (7 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 1)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 2) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init 3) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-1)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))) - ((send (cat a-0 ra-1)) - (recv - (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) - (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k))))) - (label 95) - (parent 70) - (unrealized (7 1)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (7 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 3) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand init-reauth 4) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-1)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))) - ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) - (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2)) - (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))) - (label 96) - (parent 70) - (unrealized (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b) - (ks ks) (k k)) - (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0) - (a a-0) (b b-0) (ks ks-0) (k k)) - (precedes ((0 1) (7 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) - ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0)) - ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-strand resp-reauth 2) (enc rb k) - (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-1)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))) - ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) - (send (cat rb-prime-0 (enc rb k))))) - (label 97) - (parent 70) - (unrealized (7 0)) - (comment "aborted")) - -(defskeleton neuman-stubblebine - (vars - (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 - text) (a b ks name) (k skey)) - (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) - (k k)) - (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) - (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) - (tb tb) (a a) (b b) (ks ks) (k k)) - (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b) - (ks ks) (k k)) - (deflistener k) - (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0)) - ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2)) - ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2))) - (non-orig (ltk a ks) (ltk b ks)) - (uniq-orig ra rb ra-prime rb-prime k) - (operation encryption-test (added-listener k) (enc rb k) (0 2)) - (traces - ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) - (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) - ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) - (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) - ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) - (send - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - rb-0))) - ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) - (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) - ((recv (enc a k tb (ltk b ks))) - (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) - (recv (cat ra-prime-0 (enc ra-prime-1 k))) - (send (enc ra-prime-0 k))) - ((send (cat a ra-0)) - (recv - (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) - ra-prime-1)) - (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))) - ((recv k) (send k))) - (label 98) - (parent 70) - (unrealized (7 0)) +(comment "CPSA 2.1.0") +(comment "All input read") + +(defprotocol neuman-stubblebine basic + (defrole init + (vars (a b ks name) (ra rb text) (k skey) (tb text)) + (trace (send (cat a ra)) + (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) + (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (defrole resp + (vars (a b ks name) (ra rb text) (k skey) (tb text)) + (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (defrole init-reauth + (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text)) + (trace (recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime)) + (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))) + (defrole resp-reauth + (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text)) + (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))) + (defrole keyserver + (vars (a b ks name) (ra rb text) (k skey) (tb text)) + (trace (recv (cat b rb (enc a ra tb (ltk b ks)))) + (send + (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) + (uniq-orig k))) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))) + (label 0) + (unrealized (0 2) (1 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text) (a b ks name) + (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (precedes ((2 1) (0 2)) ((2 1) (1 0))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc a k tb-0 (ltk b ks)) (1 0)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0)))) + (label 1) + (parent 0) + (unrealized (0 2) (1 2) (2 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp 2) + (enc a ra-0 tb-0 (ltk b ks)) (2 0)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))) + (label 2) + (parent 1) + (unrealized (0 2) (1 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text) + (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) + ((4 2) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc rb-prime k) + (1 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0)) + (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime)) + (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k))))) + (label 3) + (parent 2) + (unrealized (0 2) (4 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 tb-1 + text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((3 1) (2 0)) ((4 3) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) + (enc rb-prime k) (1 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a-0 k tb-1 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))) + (label 4) + (parent 2) + (unrealized (0 2) (4 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 tb-1 + text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) + ((4 1) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) + (enc rb-prime k) (1 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k))))) + (label 5) + (parent 2) + (unrealized (0 2) (4 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (deflistener k) + (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0)) + ((4 1) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc rb-prime k) (1 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv k) (send k))) + (label 6) + (parent 2) + (unrealized (0 2) (4 0)) + (comment "empty cohort")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) + ((4 2) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test + (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 1) + (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k))))) + (label 7) + (parent 3) + (unrealized (0 2) (4 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((3 1) (2 0)) ((4 3) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test + (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0) + (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))) + (label 8) + (parent 4) + (unrealized (0 2) (4 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) + ((4 1) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test + (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0) + (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k))))) + (label 9) + (parent 5) + (unrealized (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) + ((4 2) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc b ra-0 k tb-0 (ltk a ks)) (4 1)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k))))) + (label 10) + (parent 7) + (unrealized (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-1 + text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-1) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc ra-prime-0 k) + (4 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0)) + (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0)) + (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-0 k))))) + (label 11) + (parent 8) + (unrealized (0 2) (5 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) + (enc ra-prime-0 k) (4 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a-0 k tb-1 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k)))) + (label 12) + (parent 8) + (unrealized (0 2) (5 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) + (enc ra-prime-0 k) (4 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k))))) + (label 13) + (parent 8) + (unrealized (0 2) (5 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (deflistener k) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc ra-prime-0 k) + (4 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv k) (send k))) + (label 14) + (parent 8) + (unrealized (0 2) (5 0)) + (comment "empty cohort")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) + ((4 1) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc a k tb (ltk b ks)) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k))))) + (label 15) + (parent 9) + (unrealized (0 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name) + (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)) + ((4 2) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc a k tb (ltk b ks)) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))) + (label 16) + (parent 10) + (unrealized (0 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test + (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 1) + (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k))))) + (label 17) + (parent 11) + (unrealized (0 2) (5 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test + (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0) + (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k)))) + (label 18) + (parent 12) + (unrealized (0 2) (5 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + rb-prime-0 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test + (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0) + (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k))))) + (label 19) + (parent 13) + (unrealized (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 tb-0 + text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1)) + ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc rb k) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) + (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k))))) + (label 20) + (parent 15) + (unrealized (5 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 + tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0) + (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) (enc rb k) + (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))) + (label 21) + (parent 15) + (unrealized (5 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1 + tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0) + (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) (enc rb k) + (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) + (send (cat rb-prime-1 (enc rb k))))) + (label 22) + (parent 15) + (unrealized (5 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (deflistener k) + (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0)) + ((4 1) (1 2)) ((5 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc rb k) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k))) + (label 23) + (parent 15) + (unrealized (5 0)) + (comment "empty cohort")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text) + (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1)) + ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc rb k) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) + (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k))))) + (label 24) + (parent 16) + (unrealized (5 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text) + (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0) + (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) (enc rb k) + (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))) + (label 25) + (parent 16) + (unrealized (5 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text) + (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0) + (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) (enc rb k) + (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) + (send (cat rb-prime-0 (enc rb k))))) + (label 26) + (parent 16) + (unrealized (5 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name) + (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (deflistener k) + (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0)) + ((4 2) (1 2)) ((5 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc rb k) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv k) (send k))) + (label 27) + (parent 16) + (unrealized (5 0)) + (comment "empty cohort")) + +(defskeleton neuman-stubblebine + (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc b ra-0 k tb-0 (ltk a ks)) (5 1)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k))))) + (label 28) + (parent 17) + (unrealized (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-1) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 2) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc ra-prime-1 k) + (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0)) + (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1)) + (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-1 k))))) + (label 29) + (parent 18) + (unrealized (0 2) (6 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 ra-prime-2 tb-1 text) (a b ks a-0 b-0 ks-0 name) + (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) + (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 3) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) + (enc ra-prime-1 k) (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((recv (enc a-0 k tb-1 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2)) + (recv (cat ra-prime-1 (enc ra-prime-2 k))) + (send (enc ra-prime-1 k)))) + (label 30) + (parent 18) + (unrealized (0 2) (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name) + (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0) + (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) + (enc ra-prime-1 k) (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1)) + (send (cat rb-prime-0 (enc ra-prime-1 k))))) + (label 31) + (parent 18) + (unrealized (0 2) (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (deflistener k) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc ra-prime-1 k) + (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) ((recv k) (send k))) + (label 32) + (parent 18) + (unrealized (0 2) (6 0)) + (comment "empty cohort")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc a k tb (ltk b ks)) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k))))) + (label 33) + (parent 19) + (unrealized (0 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1)) + ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) + (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (label 34) + (parent 20) + (unrealized (5 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))) + (label 35) + (parent 21) + (unrealized (5 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (cat (enc a k tb (ltk b ks)) rb)) + (send (cat rb-prime-1 (enc rb k))))) + (label 36) + (parent 22) + (unrealized) + (shape) + (comment "2 in cohort - 2 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1)) + ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) + (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (label 37) + (parent 24) + (unrealized (5 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))) + (label 38) + (parent 25) + (unrealized (5 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (cat (enc a k tb (ltk b ks)) rb)) + (send (cat rb-prime-0 (enc rb k))))) + (label 39) + (parent 26) + (unrealized) + (shape) + (comment "2 in cohort - 2 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc a k tb (ltk b ks)) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))) + (label 40) + (parent 28) + (unrealized (0 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 ra-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 2) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test + (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 1) + (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + ra-prime-1)) + (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k))))) + (label 41) + (parent 29) + (unrealized (0 2) (6 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 ra-prime-2 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 3) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test + (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0) + (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) + (recv (cat ra-prime-1 (enc ra-prime-2 k))) + (send (enc ra-prime-1 k)))) + (label 42) + (parent 30) + (unrealized (0 2) (6 2)) + (comment "4 in cohort - 4 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 rb-prime-0 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test + (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0) + (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (send (cat rb-prime-0 (enc ra-prime-1 k))))) + (label 43) + (parent 31) + (unrealized (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 1) (4 2)) ((6 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc rb k) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k)))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) + (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k))))) + (label 44) + (parent 33) + (unrealized (6 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0) + (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 1) (4 2)) ((6 3) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) (enc rb k) + (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k)))) + ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) + (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))) + (label 45) + (parent 33) + (unrealized (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0) + (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 1) (4 2)) ((6 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) (enc rb k) + (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k)))) + ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) + (send (cat rb-prime-1 (enc rb k))))) + (label 46) + (parent 33) + (unrealized (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (deflistener k) + (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)) + ((6 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc rb k) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k))) + (label 47) + (parent 33) + (unrealized (6 0)) + (comment "empty cohort")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1)) + ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc b ra-0 k tb (ltk a ks)) (5 1)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) + (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (label 48) + (parent 34) + (unrealized) + (shape) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 + ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) + ((6 2) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc ra-prime-0 k) + (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) + (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k))))) + (label 49) + (parent 35) + (unrealized (6 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 + ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) + ((6 3) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) + (enc ra-prime-0 k) (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k)))) + (label 50) + (parent 35) + (unrealized (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 + rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1) + (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) + ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) + (enc ra-prime-0 k) (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) + (send (cat rb-prime-1 (enc ra-prime-0 k))))) + (label 51) + (parent 35) + (unrealized (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (deflistener k) + (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) + ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc ra-prime-0 k) + (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv k) (send k))) + (label 52) + (parent 35) + (unrealized (6 0)) + (comment "empty cohort")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb rb-0 rb-prime-0 rb-prime-1 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0)) + ((3 1) (1 2)) ((4 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation collapsed 3 0) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra tb (ltk b ks)))) + (send + (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (cat (enc a k tb (ltk b ks)) rb)) + (send (cat rb-prime-1 (enc rb k))))) + (label 53) + (parent 36) + (unrealized) + (shape) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0)) + ((3 1) (2 0)) ((4 1) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra ra-prime rb-prime k) + (operation collapsed 5 1) + (traces + ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) + ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k))))) + (label 54) + (parent 36) + (seen 79) + (unrealized) + (shape) + (comment "1 in cohort - 0 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name) + (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1)) + ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc b ra-0 k tb (ltk a ks)) (5 1)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) + (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (label 55) + (parent 37) + (unrealized) + (shape)) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0 + text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) + ((6 2) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc ra-prime-0 k) + (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) + (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k))))) + (label 56) + (parent 38) + (unrealized (6 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 + tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) + ((6 3) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) + (enc ra-prime-0 k) (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k)))) + (label 57) + (parent 38) + (unrealized (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) + ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) + (enc ra-prime-0 k) (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k))))) + (label 58) + (parent 38) + (unrealized (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (deflistener k) + (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) + ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc ra-prime-0 k) + (5 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv k) (send k))) + (label 59) + (parent 38) + (unrealized (6 0)) + (comment "empty cohort")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb rb-0 rb-prime-0 text) (a b ks name) + (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0)) + ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation collapsed 3 0) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra tb (ltk b ks)))) + (send + (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))) + ((send (cat a ra)) + (recv + (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (cat (enc a k tb (ltk b ks)) rb)) + (send (cat rb-prime-0 (enc rb k))))) + (label 60) + (parent 39) + (unrealized) + (shape) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 text) (a b ks name) + (k skey)) + (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0)) + ((3 1) (2 0)) ((4 2) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra ra-prime rb-prime k) + (operation collapsed 5 1) + (traces + ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) + ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))) + (label 61) + (parent 39) + (seen 83) + (unrealized) + (shape) + (comment "1 in cohort - 0 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0 + text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 2) (4 2)) ((6 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc rb k) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0)) + (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k))))) + (label 62) + (parent 40) + (unrealized (6 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 + tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0) + (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 2) (4 2)) ((6 3) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) (enc rb k) + (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) + ((recv (enc a-0 k tb-0 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1)) + (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))) + (label 63) + (parent 40) + (unrealized (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0) + (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 2) (4 2)) ((6 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) (enc rb k) + (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) + ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb)) + (send (cat rb-prime-0 (enc rb k))))) + (label 64) + (parent 40) + (unrealized (6 0)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (deflistener k) + (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)) + ((6 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc rb k) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) + ((recv k) (send k))) + (label 65) + (parent 40) + (unrealized (6 0)) + (comment "empty cohort")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 2) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc b ra-0 k tb-0 (ltk a ks)) (6 1)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + ra-prime-1)) + (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k))))) + (label 66) + (parent 41) + (unrealized (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(comment "Strand bound exceeded--aborting run") + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 ra-prime-2 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) + (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb ra-prime-2) (tb tb-1) (a a-0) (b b-0) + (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) + ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init 3) (enc ra-prime-2 k) + (6 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) + (recv (cat ra-prime-1 (enc ra-prime-2 k))) + (send (enc ra-prime-1 k))) + ((send (cat a-0 ra-1)) + (recv + (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0)) + (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2)) + (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-2 k))))) + (label 67) + (parent 42) + (unrealized (0 2) (7 1)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 ra-prime-2 ra-prime-3 tb-1 text) + (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2) + (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) + ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand init-reauth 4) + (enc ra-prime-2 k) (6 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) + (recv (cat ra-prime-1 (enc ra-prime-2 k))) + (send (enc ra-prime-1 k))) + ((recv (enc a-0 k tb-1 (ltk b-0 ks-0))) + (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-3)) + (recv (cat ra-prime-2 (enc ra-prime-3 k))) + (send (enc ra-prime-2 k)))) + (label 68) + (parent 42) + (unrealized (0 2) (7 0)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 ra-prime-2 rb-prime-0 tb-1 text) + (a b ks a-0 b-0 ks-0 name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0) + (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) + ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand resp-reauth 2) + (enc ra-prime-2 k) (6 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) + (recv (cat ra-prime-1 (enc ra-prime-2 k))) + (send (enc ra-prime-1 k))) + ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2)) + (send (cat rb-prime-0 (enc ra-prime-2 k))))) + (label 69) + (parent 42) + (unrealized (0 2) (7 0)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 + ra-prime-1 ra-prime-2 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b) + (ks ks) (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1) + (tb tb-0) (a a) (b b) (ks ks) (k k)) + (deflistener k) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) + ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-listener k) (enc ra-prime-2 k) + (6 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks)))) + (send + (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) + (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((recv (enc a k tb-0 (ltk b ks))) + (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2)) + (recv (cat ra-prime-1 (enc ra-prime-2 k))) + (send (enc ra-prime-1 k))) ((recv k) (send k))) + (label 70) + (parent 42) + (unrealized (0 2) (7 0)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 + rb-prime-0 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc a k tb (ltk b ks)) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1)) + (send (cat rb-prime-0 (enc ra-prime-1 k))))) + (label 71) + (parent 43) + (unrealized (0 2)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + ra-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 1) (4 2)) ((6 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k)))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) + (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (label 72) + (parent 44) + (unrealized (6 1)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + ra-prime-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 1) (4 2)) ((6 3) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) + (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))) + (label 73) + (parent 45) + (unrealized (6 2)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + rb-prime-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 1) (4 2)) ((6 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k)))) + ((recv (cat (enc a k tb (ltk b ks)) rb)) + (send (cat rb-prime-1 (enc rb k))))) + (label 74) + (parent 46) + (unrealized) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb rb-0 rb-prime-0 text) (a b ks name) + (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1)) + ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation collapsed 3 0) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra tb (ltk b ks)))) + (send + (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((send (cat a ra)) + (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) + (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (label 75) + (parent 48) + (unrealized) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 + ra-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) + ((6 2) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))) + (label 76) + (parent 49) + (unrealized (6 1)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 + ra-prime-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) + ((6 3) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k)))) + (label 77) + (parent 50) + (unrealized (6 2)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0 + rb-prime-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1) + (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)) + ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-1 (enc ra-prime-0 k))))) + (label 78) + (parent 51) + (unrealized) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars (ra ra-prime rb-prime tb rb rb-prime-0 text) (a b ks name) + (k skey)) + (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0)) + ((3 1) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra ra-prime rb-prime k) + (operation collapsed 4 1) + (traces + ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb (enc a ra tb (ltk b ks)))) + (send + (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) + ((recv (cat (enc a k tb (ltk b ks)) rb-prime)) + (send (cat rb-prime-0 (enc rb-prime k))))) + (label 79) + (parent 53) + (unrealized) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) + ((6 2) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))) + (label 80) + (parent 56) + (unrealized (6 1)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) + ((6 3) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k)))) + (label 81) + (parent 57) + (unrealized (6 2)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) + ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)) + ((6 1) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (send (cat rb-prime-0 (enc ra-prime-0 k))))) + (label 82) + (parent 58) + (unrealized) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars (ra ra-prime rb-prime tb rb text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks) + (k k)) + (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0)) + ((3 0) (0 0)) ((3 2) (1 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra ra-prime rb-prime k) + (operation collapsed 4 1) + (traces + ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb (enc a ra tb (ltk b ks)))) + (send + (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) + ((send (cat a ra)) + (recv + (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-prime)) + (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))) + (label 83) + (parent 60) + (unrealized) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text) + (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 2) (4 2)) ((6 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) + (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (label 84) + (parent 62) + (unrealized (6 1)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 2) (4 2)) ((6 3) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) + (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))) + (label 85) + (parent 63) + (unrealized (6 2)) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b) + (ks ks) (k k)) + (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb) + (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 2) (4 2)) ((6 1) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-0)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))) + ((recv (cat (enc a k tb (ltk b ks)) rb)) + (send (cat rb-prime-0 (enc rb k))))) + (label 86) + (parent 64) + (unrealized) + (comment "aborted")) + +(defskeleton neuman-stubblebine + (vars + (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1 + text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0) + (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b) + (ks ks) (k k)) + (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) + ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) + ((5 3) (4 2)) ((6 2) (5 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb ra-prime rb-prime k) + (operation encryption-test (added-strand keyserver 2) + (enc a k tb (ltk b ks)) (0 2)) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat (enc a k tb (ltk b ks)) ra-prime)) + (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-0)) + (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))) + ((recv (enc a k tb (ltk b ks))) + (send (cat (enc a k tb (ltk b ks)) ra-prime-1)) + (recv (cat ra-prime-0 (enc ra-prime-1 k))) + (send (enc ra-prime-0 k))) + ((send (cat a ra-0)) + (recv + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + ra-prime-1)) + (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))) + (label 87) + (parent 66) + (unrealized (0 2)) (comment "aborted")) diff --git a/tst/neuman-stubblebine.tst b/tst/neuman-stubblebine.tst --- a/tst/neuman-stubblebine.tst +++ b/tst/neuman-stubblebine.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol neuman-stubblebine basic @@ -212,6 +212,35 @@ (comment "empty cohort")) (defskeleton neuman-stubblebine + (vars (ra rb tb ra-0 rb-0 rb-1 ra-1 text) (a b ks name) (k skey)) + (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) + (k k)) + (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks)) + (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) + (precedes ((0 1) (3 1)) ((1 1) (3 1)) ((2 1) (1 0)) ((3 2) (0 2))) + (non-orig (ltk a ks) (ltk b ks)) + (uniq-orig ra rb k) + (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb)) + k (3 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (traces + ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) + (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) + ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks)))) + (send + (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) + rb-0))) + ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))) + ((send (cat a ra-1)) + (recv + (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) + (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) + (label 8) + (parent 6) + (unrealized (3 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton neuman-stubblebine (vars (ra rb tb ra-0 rb-0 rb-1 text) (a b ks name) (k skey)) (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k)) (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks) @@ -221,9 +250,8 @@ (precedes ((0 1) (3 1)) ((1 1) (3 1)) ((2 1) (1 0)) ((3 2) (0 2))) (non-orig (ltk a ks) (ltk b ks)) (uniq-orig ra rb k) - (operation nonce-test - (contracted (a-0 a) (b-0 b) (ks-0 ks) (ra-1 ra-0) (tb-0 tb)) k (3 1) - (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks))) + (operation encryption-test (added-strand keyserver 2) + (enc b ra-0 k tb (ltk a ks)) (3 1)) (traces ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks)))) (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))) @@ -236,8 +264,8 @@ (recv (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) - (label 8) - (parent 6) + (label 9) + (parent 8) (unrealized) (shape) (comment "1 in cohort - 1 not yet seen")) @@ -261,8 +289,8 @@ ((send (cat a ra)) (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)) (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) - (label 9) - (parent 8) + (label 10) + (parent 9) (unrealized) (shape)) @@ -295,7 +323,7 @@ ((recv (cat b rb (enc a ra tb (ltk b ks)))) (send (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))) - (label 10) + (label 11) (unrealized (0 0)) (comment "1 in cohort - 1 not yet seen")) @@ -314,8 +342,8 @@ (send (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))) ((recv (cat a ra)) (send (cat b rb-0 (enc a ra tb (ltk b ks)))))) - (label 11) - (parent 10) + (label 12) + (parent 11) (unrealized) (shape)) diff --git a/tst/no_contraction.tst b/tst/no_contraction.tst --- a/tst/no_contraction.tst +++ b/tst/no_contraction.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol no-contraction basic diff --git a/tst/non_transforming.scm b/tst/non_transforming.scm new file mode 100644 --- /dev/null +++ b/tst/non_transforming.scm @@ -0,0 +1,33 @@ +(defprotocol non_transforming basic + (defrole sender + (vars (a b text) (B name)) + (trace + (send (enc a b (pubk B))) + ) + (uniq-orig a b) + (non-orig (privk B)) + ) + (defrole recv + (vars (a b text) (B name)) + (trace + (recv (enc a (pubk B))) + (recv (enc b (pubk B))) + ) + ) + (defrole breaker + (vars (a b text) (B name)) + (trace + (recv (enc a b (pubk B))) + (send (enc a (pubk B))) + (send (enc b (pubk B))) + ) + ) +) + +(defskeleton non_transforming + (vars (a b c d text) (B B0 B1 name)) + (defstrand recv 2 (a a) (b b) (B B)) + (defstrand sender 1 (a a) (b d) (B B0)) + (defstrand sender 1 (a c) (b b) (B B1)) + (uniq-orig a b) +) diff --git a/tst/non_transforming.tst b/tst/non_transforming.tst new file mode 100644 --- /dev/null +++ b/tst/non_transforming.tst @@ -0,0 +1,229 @@ +(comment "CPSA 2.1.0") +(comment "All input read") + +(defprotocol non_transforming basic + (defrole sender + (vars (a b text) (B name)) + (trace (send (enc a b (pubk B)))) + (non-orig (privk B)) + (uniq-orig a b)) + (defrole recv + (vars (a b text) (B name)) + (trace (recv (enc a (pubk B))) (recv (enc b (pubk B))))) + (defrole breaker + (vars (a b text) (B name)) + (trace (recv (enc a b (pubk B))) (send (enc a (pubk B))) + (send (enc b (pubk B)))))) + +(defskeleton non_transforming + (vars (a b c d text) (B B0 B1 name)) + (defstrand recv 2 (a a) (b b) (B B)) + (defstrand sender 1 (a a) (b d) (B B0)) + (defstrand sender 1 (a c) (b b) (B B1)) + (non-orig (privk B0) (privk B1)) + (uniq-orig a b c d) + (traces ((recv (enc a (pubk B))) (recv (enc b (pubk B)))) + ((send (enc a d (pubk B0)))) ((send (enc c b (pubk B1))))) + (label 0) + (unrealized (0 0) (0 1))) + +(defskeleton non_transforming + (vars (a b c d text) (B B0 B1 name)) + (defstrand recv 2 (a a) (b b) (B B)) + (defstrand sender 1 (a a) (b d) (B B0)) + (defstrand sender 1 (a c) (b b) (B B1)) + (precedes ((1 0) (0 0)) ((2 0) (0 1))) + (non-orig (privk B0) (privk B1)) + (uniq-orig a b c d) + (traces ((recv (enc a (pubk B))) (recv (enc b (pubk B)))) + ((send (enc a d (pubk B0)))) ((send (enc c b (pubk B1))))) + (label 1) + (parent 0) + (unrealized (0 0) (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton non_transforming + (vars (a b c d text) (B B0 B1 name)) + (defstrand recv 2 (a a) (b b) (B B)) + (defstrand sender 1 (a a) (b d) (B B0)) + (defstrand sender 1 (a c) (b b) (B B1)) + (defstrand breaker 2 (a a) (b d) (B B0)) + (precedes ((1 0) (3 0)) ((2 0) (0 1)) ((3 1) (0 0))) + (non-orig (privk B0) (privk B1)) + (uniq-orig a b c d) + (operation nonce-test (added-strand breaker 2) a (0 0) + (enc a d (pubk B0))) + (traces ((recv (enc a (pubk B))) (recv (enc b (pubk B)))) + ((send (enc a d (pubk B0)))) ((send (enc c b (pubk B1)))) + ((recv (enc a d (pubk B0))) (send (enc a (pubk B0))))) + (label 2) + (parent 1) + (unrealized (0 0) (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton non_transforming + (vars (a b c d text) (B0 B1 name)) + (defstrand recv 2 (a a) (b b) (B B0)) + (defstrand sender 1 (a a) (b d) (B B0)) + (defstrand sender 1 (a c) (b b) (B B1)) + (defstrand breaker 2 (a a) (b d) (B B0)) + (precedes ((1 0) (3 0)) ((2 0) (0 1)) ((3 1) (0 0))) + (non-orig (privk B0) (privk B1)) + (uniq-orig a b c d) + (operation nonce-test (contracted (B B0)) a (0 0) (enc a (pubk B0)) + (enc a d (pubk B0))) + (traces ((recv (enc a (pubk B0))) (recv (enc b (pubk B0)))) + ((send (enc a d (pubk B0)))) ((send (enc c b (pubk B1)))) + ((recv (enc a d (pubk B0))) (send (enc a (pubk B0))))) + (label 3) + (parent 2) + (unrealized (0 1)) + (comment "2 in cohort - 2 not yet seen")) + +(defskeleton non_transforming + (vars (a b c d text) (B0 B1 name)) + (defstrand recv 2 (a a) (b b) (B B0)) + (defstrand sender 1 (a a) (b d) (B B0)) + (defstrand sender 1 (a c) (b b) (B B1)) + (defstrand breaker 2 (a a) (b d) (B B0)) + (defstrand breaker 3 (a c) (b b) (B B1)) + (precedes ((1 0) (3 0)) ((2 0) (4 0)) ((3 1) (0 0)) ((4 2) (0 1))) + (non-orig (privk B0) (privk B1)) + (uniq-orig a b c d) + (operation nonce-test (added-strand breaker 3) b (0 1) + (enc c b (pubk B1))) + (traces ((recv (enc a (pubk B0))) (recv (enc b (pubk B0)))) + ((send (enc a d (pubk B0)))) ((send (enc c b (pubk B1)))) + ((recv (enc a d (pubk B0))) (send (enc a (pubk B0)))) + ((recv (enc c b (pubk B1))) (send (enc c (pubk B1))) + (send (enc b (pubk B1))))) + (label 4) + (parent 3) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton non_transforming + (vars (a c d text) (B0 B1 name)) + (defstrand recv 2 (a a) (b c) (B B0)) + (defstrand sender 1 (a a) (b d) (B B0)) + (defstrand sender 1 (a c) (b c) (B B1)) + (defstrand breaker 2 (a a) (b d) (B B0)) + (defstrand breaker 2 (a c) (b c) (B B1)) + (precedes ((1 0) (3 0)) ((2 0) (4 0)) ((3 1) (0 0)) ((4 1) (0 1))) + (non-orig (privk B0) (privk B1)) + (uniq-orig a c d) + (operation nonce-test (added-strand breaker 2) c (0 1) + (enc c c (pubk B1))) + (traces ((recv (enc a (pubk B0))) (recv (enc c (pubk B0)))) + ((send (enc a d (pubk B0)))) ((send (enc c c (pubk B1)))) + ((recv (enc a d (pubk B0))) (send (enc a (pubk B0)))) + ((recv (enc c c (pubk B1))) (send (enc c (pubk B1))))) + (label 5) + (parent 3) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton non_transforming + (vars (a b c d text) (B1 name)) + (defstrand recv 2 (a a) (b b) (B B1)) + (defstrand sender 1 (a a) (b d) (B B1)) + (defstrand sender 1 (a c) (b b) (B B1)) + (defstrand breaker 2 (a a) (b d) (B B1)) + (defstrand breaker 3 (a c) (b b) (B B1)) + (precedes ((1 0) (3 0)) ((2 0) (4 0)) ((3 1) (0 0)) ((4 2) (0 1))) + (non-orig (privk B1)) + (uniq-orig a b c d) + (operation nonce-test (contracted (B0 B1)) b (0 1) (enc b (pubk B1)) + (enc c b (pubk B1))) + (traces ((recv (enc a (pubk B1))) (recv (enc b (pubk B1)))) + ((send (enc a d (pubk B1)))) ((send (enc c b (pubk B1)))) + ((recv (enc a d (pubk B1))) (send (enc a (pubk B1)))) + ((recv (enc c b (pubk B1))) (send (enc c (pubk B1))) + (send (enc b (pubk B1))))) + (label 6) + (parent 4) + (unrealized) + (shape) + (comment "2 in cohort - 2 not yet seen")) + +(defskeleton non_transforming + (vars (a c d text) (B1 name)) + (defstrand recv 2 (a a) (b c) (B B1)) + (defstrand sender 1 (a a) (b d) (B B1)) + (defstrand sender 1 (a c) (b c) (B B1)) + (defstrand breaker 2 (a a) (b d) (B B1)) + (defstrand breaker 2 (a c) (b c) (B B1)) + (precedes ((1 0) (3 0)) ((2 0) (4 0)) ((3 1) (0 0)) ((4 1) (0 1))) + (non-orig (privk B1)) + (uniq-orig a c d) + (operation nonce-test (contracted (B0 B1)) c (0 1) (enc c (pubk B1)) + (enc c c (pubk B1))) + (traces ((recv (enc a (pubk B1))) (recv (enc c (pubk B1)))) + ((send (enc a d (pubk B1)))) ((send (enc c c (pubk B1)))) + ((recv (enc a d (pubk B1))) (send (enc a (pubk B1)))) + ((recv (enc c c (pubk B1))) (send (enc c (pubk B1))))) + (label 7) + (parent 5) + (seen 10) + (unrealized) + (shape) + (comment "2 in cohort - 1 not yet seen")) + +(defskeleton non_transforming + (vars (a d text) (B1 name)) + (defstrand recv 2 (a a) (b d) (B B1)) + (defstrand sender 1 (a a) (b d) (B B1)) + (defstrand breaker 2 (a a) (b d) (B B1)) + (defstrand breaker 3 (a a) (b d) (B B1)) + (precedes ((1 0) (2 0)) ((1 0) (3 0)) ((2 1) (0 0)) ((3 2) (0 1))) + (non-orig (privk B1)) + (uniq-orig a d) + (operation collapsed 2 1) + (traces ((recv (enc a (pubk B1))) (recv (enc d (pubk B1)))) + ((send (enc a d (pubk B1)))) + ((recv (enc a d (pubk B1))) (send (enc a (pubk B1)))) + ((recv (enc a d (pubk B1))) (send (enc a (pubk B1))) + (send (enc d (pubk B1))))) + (label 8) + (parent 6) + (seen 9) + (unrealized) + (shape) + (comment "1 in cohort - 0 not yet seen")) + +(defskeleton non_transforming + (vars (b c text) (B1 name)) + (defstrand recv 2 (a c) (b b) (B B1)) + (defstrand sender 1 (a c) (b b) (B B1)) + (defstrand breaker 3 (a c) (b b) (B B1)) + (precedes ((1 0) (2 0)) ((2 1) (0 0)) ((2 2) (0 1))) + (non-orig (privk B1)) + (uniq-orig b c) + (operation collapsed 3 4) + (traces ((recv (enc c (pubk B1))) (recv (enc b (pubk B1)))) + ((send (enc c b (pubk B1)))) + ((recv (enc c b (pubk B1))) (send (enc c (pubk B1))) + (send (enc b (pubk B1))))) + (label 9) + (parent 6) + (unrealized) + (shape)) + +(defskeleton non_transforming + (vars (d text) (B1 name)) + (defstrand recv 2 (a d) (b d) (B B1)) + (defstrand sender 1 (a d) (b d) (B B1)) + (defstrand breaker 2 (a d) (b d) (B B1)) + (precedes ((1 0) (2 0)) ((2 1) (0 0))) + (non-orig (privk B1)) + (uniq-orig d) + (operation collapsed 2 1) + (traces ((recv (enc d (pubk B1))) (recv (enc d (pubk B1)))) + ((send (enc d d (pubk B1)))) + ((recv (enc d d (pubk B1))) (send (enc d (pubk B1))))) + (label 10) + (parent 7) + (unrealized) + (shape)) + +(comment "Nothing left to do") diff --git a/tst/ns.tst b/tst/ns.tst --- a/tst/ns.tst +++ b/tst/ns.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol ns basic diff --git a/tst/nsl3.tst b/tst/nsl3.tst --- a/tst/nsl3.tst +++ b/tst/nsl3.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol nsl3 basic diff --git a/tst/nsl4cm1.lsp b/tst/nsl4cm1.lsp --- a/tst/nsl4cm1.lsp +++ b/tst/nsl4cm1.lsp diff --git a/tst/nsl4cm1.tst b/tst/nsl4cm1.tst --- a/tst/nsl4cm1.tst +++ b/tst/nsl4cm1.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol nsl4cm basic diff --git a/tst/nslsk.tst b/tst/nslsk.tst --- a/tst/nslsk.tst +++ b/tst/nslsk.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol nslsk basic diff --git a/tst/or.tst b/tst/or.tst --- a/tst/or.tst +++ b/tst/or.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol or basic diff --git a/tst/pca.tst b/tst/pca.tst --- a/tst/pca.tst +++ b/tst/pca.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol aic basic diff --git a/tst/pruning1.scm b/tst/pruning1.scm new file mode 100644 --- /dev/null +++ b/tst/pruning1.scm @@ -0,0 +1,32 @@ +(defprotocol prune basic + (defrole init (vars (a b name) (n text)) + (trace + (send (enc n (pubk a))) + (recv (enc n (pubk b) (pubk a))) + (recv (enc n (privk b) (pubk a))) + ) + (uniq-orig n) + (non-orig (privk a)) + ) + (defrole trans (vars (a name) (n text) (k akey)) + (trace + (recv (enc n (pubk a))) + (recv k ) + (send (enc n k (pubk a))) + ) + ) + (comment "Shows a failure with generalization" + "Run this with a step count of 4")) + +(defskeleton prune + (vars (a name) (n text) (k akey)) + (defstrand init 3)) + +(defskeleton prune + (vars (n text) (a b name)) + (defstrand init 3 (n n) (a a) (b b)) + (defstrand trans 3 (n n) (a a) (k (pubk b))) + (defstrand trans 3 (n n) (a a) (k (privk b))) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (0 2))) +) + diff --git a/tst/pruning1.tst b/tst/pruning1.tst new file mode 100644 --- /dev/null +++ b/tst/pruning1.tst @@ -0,0 +1,143 @@ +(comment "CPSA 2.1.0") +(comment "All input read") + +(defprotocol prune basic + (defrole init + (vars (a b name) (n text)) + (trace (send (enc n (pubk a))) (recv (enc n (pubk b) (pubk a))) + (recv (enc n (privk b) (pubk a)))) + (non-orig (privk a)) + (uniq-orig n)) + (defrole trans + (vars (a name) (n text) (k akey)) + (trace (recv (enc n (pubk a))) (recv k) (send (enc n k (pubk a))))) + (comment "Shows a failure with generalization" + "Run this with a step count of 4")) + +(defskeleton prune + (vars (n text) (a b name)) + (defstrand init 3 (n n) (a a) (b b)) + (non-orig (privk a)) + (uniq-orig n) + (traces + ((send (enc n (pubk a))) (recv (enc n (pubk b) (pubk a))) + (recv (enc n (privk b) (pubk a))))) + (label 0) + (unrealized (0 1) (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton prune + (vars (n text) (a b name) (k akey)) + (defstrand init 3 (n n) (a a) (b b)) + (defstrand trans 3 (n n) (a a) (k k)) + (precedes ((0 0) (1 0)) ((1 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (added-strand trans 3) n (0 1) (enc n (pubk a))) + (traces + ((send (enc n (pubk a))) (recv (enc n (pubk b) (pubk a))) + (recv (enc n (privk b) (pubk a)))) + ((recv (enc n (pubk a))) (recv k) (send (enc n k (pubk a))))) + (label 1) + (parent 0) + (unrealized (0 1) (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton prune + (vars (n text) (a b name)) + (defstrand init 3 (n n) (a a) (b b)) + (defstrand trans 3 (n n) (a a) (k (pubk b))) + (precedes ((0 0) (1 0)) ((1 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (contracted (k (pubk b))) n (0 1) + (enc n (pubk a)) (enc n (pubk b) (pubk a))) + (traces + ((send (enc n (pubk a))) (recv (enc n (pubk b) (pubk a))) + (recv (enc n (privk b) (pubk a)))) + ((recv (enc n (pubk a))) (recv (pubk b)) + (send (enc n (pubk b) (pubk a))))) + (label 2) + (parent 1) + (unrealized (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton prune + (vars (n text) (a b name) (k akey)) + (defstrand init 3 (n n) (a a) (b b)) + (defstrand trans 3 (n n) (a a) (k (pubk b))) + (defstrand trans 3 (n n) (a a) (k k)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (0 2))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (added-strand trans 3) n (0 2) (enc n (pubk a)) + (enc n (pubk b) (pubk a))) + (traces + ((send (enc n (pubk a))) (recv (enc n (pubk b) (pubk a))) + (recv (enc n (privk b) (pubk a)))) + ((recv (enc n (pubk a))) (recv (pubk b)) + (send (enc n (pubk b) (pubk a)))) + ((recv (enc n (pubk a))) (recv k) (send (enc n k (pubk a))))) + (label 3) + (parent 2) + (unrealized (0 2)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton prune + (vars (n text) (a b name)) + (defstrand init 3 (n n) (a a) (b b)) + (defstrand trans 3 (n n) (a a) (k (pubk b))) + (defstrand trans 3 (n n) (a a) (k (privk b))) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (0 2))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (contracted (k (privk b))) n (0 2) + (enc n (pubk a)) (enc n (privk b) (pubk a)) + (enc n (pubk b) (pubk a))) + (traces + ((send (enc n (pubk a))) (recv (enc n (pubk b) (pubk a))) + (recv (enc n (privk b) (pubk a)))) + ((recv (enc n (pubk a))) (recv (pubk b)) + (send (enc n (pubk b) (pubk a)))) + ((recv (enc n (pubk a))) (recv (privk b)) + (send (enc n (privk b) (pubk a))))) + (label 4) + (parent 3) + (unrealized) + (shape)) + +(comment "Nothing left to do") + +(defprotocol prune basic + (defrole init + (vars (a b name) (n text)) + (trace (send (enc n (pubk a))) (recv (enc n (pubk b) (pubk a))) + (recv (enc n (privk b) (pubk a)))) + (non-orig (privk a)) + (uniq-orig n)) + (defrole trans + (vars (a name) (n text) (k akey)) + (trace (recv (enc n (pubk a))) (recv k) (send (enc n k (pubk a))))) + (comment "Shows a failure with generalization" + "Run this with a step count of 4")) + +(defskeleton prune + (vars (n text) (a b name)) + (defstrand init 3 (n n) (a a) (b b)) + (defstrand trans 3 (n n) (a a) (k (pubk b))) + (defstrand trans 3 (n n) (a a) (k (privk b))) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (0 2))) + (non-orig (privk a)) + (uniq-orig n) + (traces + ((send (enc n (pubk a))) (recv (enc n (pubk b) (pubk a))) + (recv (enc n (privk b) (pubk a)))) + ((recv (enc n (pubk a))) (recv (pubk b)) + (send (enc n (pubk b) (pubk a)))) + ((recv (enc n (pubk a))) (recv (privk b)) + (send (enc n (privk b) (pubk a))))) + (label 5) + (unrealized) + (shape)) + +(comment "Nothing left to do") diff --git a/tst/sigenc.scm b/tst/sigenc.scm --- a/tst/sigenc.scm +++ b/tst/sigenc.scm diff --git a/tst/sigenc.tst b/tst/sigenc.tst --- a/tst/sigenc.tst +++ b/tst/sigenc.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol mult-keys-sig-enc basic diff --git a/tst/sorted_epmo_acctnum.tst b/tst/sorted_epmo_acctnum.tst --- a/tst/sorted_epmo_acctnum.tst +++ b/tst/sorted_epmo_acctnum.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol epmo_acctnum basic diff --git a/tst/targetterms2.scm b/tst/targetterms2.scm new file mode 100644 --- /dev/null +++ b/tst/targetterms2.scm @@ -0,0 +1,23 @@ +;;; Target terms experiment + +(defprotocol tt2 basic + (defrole init (vars (a name) (n text)) + (trace + (send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))) + ) + (uniq-orig n) + (non-orig (privk a)) +) + (defrole trans (vars (a name) (n text) (m mesg)) + (trace + (recv (enc n (pubk a))) + (recv m) + (send (enc n m (pubk a))) + )) +) + +(defskeleton tt2 + (vars (a name) (n text)) + (defstrand init 2 (a a) (n n)) +) diff --git a/tst/targetterms2.tst b/tst/targetterms2.tst new file mode 100644 --- /dev/null +++ b/tst/targetterms2.tst @@ -0,0 +1,195 @@ +(comment "CPSA 2.1.0") +(comment "All input read") + +(defprotocol tt2 basic + (defrole init + (vars (a name) (n text)) + (trace (send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + (non-orig (privk a)) + (uniq-orig n)) + (defrole trans + (vars (a name) (n text) (m mesg)) + (trace (recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a)))))) + +(defskeleton tt2 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (non-orig (privk a)) + (uniq-orig n) + (traces + ((send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))))) + (label 0) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt2 + (vars (m mesg) (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m m) (n n) (a a)) + (precedes ((0 0) (1 0)) ((1 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (added-strand trans 3) n (0 1) (enc n (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a))))) + (label 1) + (parent 0) + (unrealized (0 1)) + (comment "2 in cohort - 2 not yet seen")) + +(defskeleton tt2 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (precedes ((0 0) (1 0)) ((1 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test + (contracted (m (enc n (enc n (pubk a)) (pubk a)))) n (0 1) + (enc n (pubk a)) (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a))) + (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))))) + (label 2) + (parent 1) + (unrealized (1 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt2 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (precedes ((0 0) (1 0)) ((1 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (contracted (m (enc n (pubk a)))) n (0 1) + (enc n (pubk a)) (enc n (enc n (pubk a)) (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a))))) + (label 3) + (parent 1) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt2 + (vars (m mesg) (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (defstrand trans 3 (m m) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (1 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (added-strand trans 3) n (1 1) (enc n (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a))) + (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a))))) + (label 4) + (parent 2) + (unrealized (1 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt2 + (vars (m mesg) (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (defstrand trans 3 (m m) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (added-strand trans 3) n (0 1) (enc n (pubk a)) + (enc n (enc n (pubk a)) (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a))))) + (label 5) + (parent 3) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt2 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (1 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (contracted (m (enc n (pubk a)))) n (1 1) + (enc n (pubk a)) (enc n (enc n (pubk a)) (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a))) + (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a))))) + (label 6) + (parent 4) + (unrealized) + (shape)) + +(defskeleton tt2 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test + (contracted (m (enc n (enc n (pubk a)) (pubk a)))) n (0 1) + (enc n (pubk a)) (enc n (enc n (pubk a)) (pubk a)) + (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a))) + (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))))) + (label 7) + (parent 5) + (unrealized (2 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt2 + (vars (m mesg) (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (defstrand trans 3 (m m) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 2) (0 1)) + ((2 2) (0 1)) ((3 2) (2 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (added-strand trans 3) n (2 1) (enc n (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a))) + (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a))))) + (label 8) + (parent 7) + (seen 6) + (unrealized (2 1)) + (comment "1 in cohort - 0 not yet seen")) + +(comment "Nothing left to do") diff --git a/tst/targetterms6.scm b/tst/targetterms6.scm new file mode 100644 --- /dev/null +++ b/tst/targetterms6.scm @@ -0,0 +1,32 @@ +;;; Target terms experiment + +(defprotocol tt6 basic + (defrole init (vars (a name) (n text) (m mesg)) + (trace + (send (enc n (pubk a))) + (recv (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a)) )) + ) + (uniq-orig n) + (non-orig (privk a)) +) + (defrole trans (vars (a name) (n text) (m mesg)) + (trace + (recv (enc n (pubk a))) + (recv m) + (send (enc n m (pubk a))) + )) +) + +(defskeleton tt6 + (vars (a name) (n text)) + (defstrand init 2 (a a) (n n)) +) + +(defskeleton tt6 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (2 1)) ((2 2) (0 1))) +) diff --git a/tst/targetterms6.tst b/tst/targetterms6.tst new file mode 100644 --- /dev/null +++ b/tst/targetterms6.tst @@ -0,0 +1,206 @@ +(comment "CPSA 2.1.0") +(comment "All input read") + +(defprotocol tt6 basic + (defrole init + (vars (a name) (n text)) + (trace (send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a))))) + (non-orig (privk a)) + (uniq-orig n)) + (defrole trans + (vars (a name) (n text) (m mesg)) + (trace (recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a)))))) + +(defskeleton tt6 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (non-orig (privk a)) + (uniq-orig n) + (traces + ((send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a)))))) + (label 0) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt6 + (vars (m mesg) (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m m) (n n) (a a)) + (precedes ((0 0) (1 0)) ((1 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (added-strand trans 3) n (0 1) (enc n (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a))))) + ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a))))) + (label 1) + (parent 0) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt6 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (precedes ((0 0) (1 0)) ((1 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (contracted (m (enc n (pubk a)))) n (0 1) + (enc n (pubk a)) (enc n (enc n (pubk a)) (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a))))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a))))) + (label 2) + (parent 1) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt6 + (vars (m mesg) (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (defstrand trans 3 (m m) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (added-strand trans 3) n (0 1) (enc n (pubk a)) + (enc n (enc n (pubk a)) (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a))))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a))))) + (label 3) + (parent 2) + (unrealized (0 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt6 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test + (contracted (m (enc n (enc n (pubk a)) (pubk a)))) n (0 1) + (enc n (pubk a)) (enc n (enc n (pubk a)) (pubk a)) + (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a))))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a))) + (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))))) + (label 4) + (parent 3) + (unrealized (2 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt6 + (vars (m mesg) (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (defstrand trans 3 (m m) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 2) (0 1)) + ((2 2) (0 1)) ((3 2) (2 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (added-strand trans 3) n (2 1) (enc n (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a))))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a))) + (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a))))) + (label 5) + (parent 4) + (unrealized (2 1)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton tt6 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (0 1)) ((2 2) (1 1))) + (non-orig (privk a)) + (uniq-orig n) + (operation nonce-test (contracted (m (enc n (pubk a)))) n (2 1) + (enc n (pubk a)) (enc n (enc n (pubk a)) (pubk a))) + (traces + ((send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a))))) + ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a))) + (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a))))) + (label 6) + (parent 5) + (unrealized) + (shape)) + +(comment "Nothing left to do") + +(defprotocol tt6 basic + (defrole init + (vars (a name) (n text)) + (trace (send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a))))) + (non-orig (privk a)) + (uniq-orig n)) + (defrole trans + (vars (a name) (n text) (m mesg)) + (trace (recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a)))))) + +(defskeleton tt6 + (vars (n text) (a name)) + (defstrand init 2 (n n) (a a)) + (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a)) + (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (2 1)) ((2 2) (0 1))) + (non-orig (privk a)) + (uniq-orig n) + (traces + ((send (enc n (pubk a))) + (recv + (cat (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)) + (enc n (enc n (pubk a)) (pubk a))))) + ((recv (enc n (pubk a))) (recv (enc n (pubk a))) + (send (enc n (enc n (pubk a)) (pubk a)))) + ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a))) + (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))))) + (label 7) + (unrealized) + (shape)) + +(comment "Nothing left to do") diff --git a/tst/uncarried_keys.scm b/tst/uncarried_keys.scm new file mode 100644 --- /dev/null +++ b/tst/uncarried_keys.scm @@ -0,0 +1,19 @@ +(defprotocol uncarried-keys basic + (defrole init + (vars (a text) (A B name) (K akey)) + (trace + (send (enc "start" a A B (pubk B))) + (recv (enc a A B (pubk A))) (send (enc a K (pubk B))) + (recv (enc a A B K))) + (non-orig (privk B) (invk K)) + (uniq-orig a K)) + (defrole resp + (vars (a text) (A B name) (K akey)) + (trace + (recv (enc "start" a A B (pubk B))) + (send (enc a A B (pubk A))) (recv (enc a K (pubk B))) + (send (enc a A B K))))) + +(defskeleton uncarried-keys + (vars (a text) (A B name) (K akey)) + (defstrand init 4 (a a) (A A) (B B) (K K))) diff --git a/tst/uncarried_keys.tst b/tst/uncarried_keys.tst new file mode 100644 --- /dev/null +++ b/tst/uncarried_keys.tst @@ -0,0 +1,125 @@ +(comment "CPSA 2.1.0") +(comment "All input read") + +(defprotocol uncarried-keys basic + (defrole init + (vars (a text) (A B name) (K akey)) + (trace (send (enc "start" a A B (pubk B))) + (recv (enc a A B (pubk A))) (send (enc a K (pubk B))) + (recv (enc a A B K))) + (non-orig (invk K) (privk B)) + (uniq-orig a K)) + (defrole resp + (vars (a text) (A B name) (K akey)) + (trace (recv (enc "start" a A B (pubk B))) + (send (enc a A B (pubk A))) (recv (enc a K (pubk B))) + (send (enc a A B K))))) + +(defskeleton uncarried-keys + (vars (a text) (A B name) (K akey)) + (defstrand init 4 (a a) (A A) (B B) (K K)) + (non-orig (invk K) (privk B)) + (uniq-orig a K) + (traces + ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A))) + (send (enc a K (pubk B))) (recv (enc a A B K)))) + (label 0) + (unrealized (0 1) (0 3)) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton uncarried-keys + (vars (a text) (A B name) (K akey)) + (defstrand init 4 (a a) (A A) (B B) (K K)) + (defstrand resp 2 (a a) (A A) (B B)) + (precedes ((0 0) (1 0)) ((1 1) (0 1))) + (non-orig (invk K) (privk B)) + (uniq-orig a K) + (operation nonce-test (added-strand resp 2) a (0 1) + (enc "start" a A B (pubk B))) + (traces + ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A))) + (send (enc a K (pubk B))) (recv (enc a A B K))) + ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A))))) + (label 1) + (parent 0) + (unrealized (0 3)) + (comment "3 in cohort - 3 not yet seen")) + +(defskeleton uncarried-keys + (vars (a text) (A B name) (K akey)) + (defstrand init 4 (a a) (A A) (B B) (K K)) + (defstrand resp 2 (a a) (A A) (B B)) + (defstrand resp 4 (a a) (A A) (B B) (K K)) + (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 2) (2 2)) ((1 1) (0 1)) + ((2 3) (0 3))) + (non-orig (invk K) (privk B)) + (uniq-orig a K) + (operation encryption-test (added-strand resp 4) (enc a A B K) (0 3)) + (traces + ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A))) + (send (enc a K (pubk B))) (recv (enc a A B K))) + ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A)))) + ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A))) + (recv (enc a K (pubk B))) (send (enc a A B K)))) + (label 2) + (parent 1) + (unrealized) + (shape) + (comment "1 in cohort - 1 not yet seen")) + +(defskeleton uncarried-keys + (vars (a text) (A B name)) + (defstrand init 4 (a a) (A A) (B B) (K (pubk A))) + (defstrand resp 2 (a a) (A A) (B B)) + (precedes ((0 0) (1 0)) ((1 1) (0 1))) + (non-orig (privk A) (privk B)) + (uniq-orig a (pubk A)) + (operation encryption-test (added-strand resp 2) (enc a A B (pubk A)) + (0 3)) + (traces + ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A))) + (send (enc a (pubk A) (pubk B))) (recv (enc a A B (pubk A)))) + ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A))))) + (label 3) + (parent 1) + (unrealized) + (shape)) + +(defskeleton uncarried-keys + (vars (a text) (A B name) (K akey)) + (defstrand init 4 (a a) (A A) (B B) (K K)) + (defstrand resp 2 (a a) (A A) (B B)) + (deflistener K) + (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) + (non-orig (invk K) (privk B)) + (uniq-orig a K) + (operation encryption-test (added-listener K) (enc a A B K) (0 3)) + (traces + ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A))) + (send (enc a K (pubk B))) (recv (enc a A B K))) + ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A)))) + ((recv K) (send K))) + (label 4) + (parent 1) + (unrealized (2 0)) + (comment "empty cohort")) + +(defskeleton uncarried-keys + (vars (a text) (A B name) (K akey)) + (defstrand init 4 (a a) (A A) (B B) (K K)) + (defstrand resp 4 (a a) (A A) (B B) (K K)) + (precedes ((0 0) (1 0)) ((0 2) (1 2)) ((1 1) (0 1)) ((1 3) (0 3))) + (non-orig (invk K) (privk B)) + (uniq-orig a K) + (operation collapsed 1 2) + (traces + ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A))) + (send (enc a K (pubk B))) (recv (enc a A B K))) + ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A))) + (recv (enc a K (pubk B))) (send (enc a A B K)))) + (label 5) + (parent 2) + (unrealized) + (shape)) + +(comment "Nothing left to do") diff --git a/tst/uo.scm b/tst/uo.scm new file mode 100644 --- /dev/null +++ b/tst/uo.scm @@ -0,0 +1,15 @@ +(defprotocol uniq-orig basic + (defrole init + (vars (n text)) + (trace (send n)) + (uniq-orig n)) + (defrole resp + (vars (m n text)) + (trace + (send (enc m n)) + (recv n)))) + +(defskeleton uniq-orig + (vars (n text)) + (defstrand init 1 (n n)) + (defstrand resp 2 (n n))) diff --git a/tst/uo.tst b/tst/uo.tst new file mode 100644 --- /dev/null +++ b/tst/uo.tst @@ -0,0 +1,29 @@ +(comment "CPSA 2.1.0") +(comment "All input read") + +(defprotocol uniq-orig basic + (defrole init (vars (n text)) (trace (send n)) (uniq-orig n)) + (defrole resp (vars (m n text)) (trace (send (enc m n)) (recv n)))) + +(defskeleton uniq-orig + (vars (n m text)) + (defstrand init 1 (n n)) + (defstrand resp 2 (m m) (n n)) + (uniq-orig n) + (traces ((send n)) ((send (enc m n)) (recv n))) + (label 0) + (unrealized (1 1))) + +(defskeleton uniq-orig + (vars (n m text)) + (defstrand init 1 (n n)) + (defstrand resp 2 (m m) (n n)) + (precedes ((0 0) (1 1))) + (uniq-orig n) + (traces ((send n)) ((send (enc m n)) (recv n))) + (label 1) + (parent 0) + (unrealized) + (shape)) + +(comment "Nothing left to do") diff --git a/tst/weird.tst b/tst/weird.tst --- a/tst/weird.tst +++ b/tst/weird.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol wierd basic diff --git a/tst/wmf.tst b/tst/wmf.tst --- a/tst/wmf.tst +++ b/tst/wmf.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol wide-mouth-frog basic diff --git a/tst/woolam.tst b/tst/woolam.tst --- a/tst/woolam.tst +++ b/tst/woolam.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol woolam basic diff --git a/tst/yahalom.tst b/tst/yahalom.tst --- a/tst/yahalom.tst +++ b/tst/yahalom.tst @@ -1,4 +1,4 @@ -(comment "CPSA 2.0.5") +(comment "CPSA 2.1.0") (comment "All input read") (defprotocol yahalom basic