packages feed

cpsa 2.2.10 → 2.2.11

raw patch · 89 files changed

+25783/−14263 lines, 89 files

Files

ChangeLog view
@@ -1,9 +1,42 @@+2012-08-24  John D. Ramsdell  <ramsdell@mitre.org>++	* cpsa.cabal (Version):  Tagged as version 2.2.11.++	* doc/cpsaprimer.tex (Appendix B): Added a discussion on shapes+	that CPSA fails to find.  It explains that the missing shapes only+	occur when interpreting roles unnaturally.++	* tst/incompleteness_example.scm: Added the example used in the+	primer that shows a shape CPSA fails to find.++2012-08-22  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/Lib/Expand.hs (include): Added a top-level form that+	includes source file while performing macro expansion.++2012-08-06  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/Lib/Reduction.hs (breadth): Added comments describing+	loop variables.++	* src/CPSA/Lib/Strand.hs (skeletonize): Expunged hulling by+	compression code.++2012-08-03  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/Lib/Reduction.hs (breadth,step): Added the tobig+	variable so that all skeletons are produced that are below the+	strand bound.++	* src/CPSA/Lib/Main.hs (main,select,go): Added source file name to+	"All input read" comment.+ 2012-06-28  John D. Ramsdell  <ramsdell@mitre.org>  	* cpsa.cabal (Version):  Tagged as version 2.2.10.  	* src/CPSA/Lib/Entry.hs (tryIO): Made error option in return value-	a string so that error messages are correctly parsed Emacs.+	a string so that error messages are correctly parsed by Emacs.  2012-06-06  John D. Ramsdell  <ramsdell@mitre.org>
NEWS view
@@ -1,5 +1,22 @@ CPSA NEWS -- history of user-visible changes. +* Changes in version 2.2.11++** Strand bounded runs produce more output+   When a problem exceeds a strand bound, CPSA now produces every+   skeleton within the strand bound before aborting.  Previously, it+   would abort as soon as it produced one skeleton with too many+   strands.  The output skeletons are no longer guaranteed to be+   sequentially labeled when a strand bound violation occurs.++** Include file support added+   The CPSA preprocessor includes files as it expands macros.  The+   syntax of the top-level include form is:++       (include FILE)++** The source file name is included as a comment in the output of CPSA+ * Changes in version 2.2.10  ** The Make.hs program now works with latest Haskell Platform
cpsa.cabal view
@@ -1,5 +1,5 @@ Name:			cpsa-Version:		2.2.10+Version:		2.2.11 Maintainer:		ramsdell@mitre.org Cabal-Version:		>= 1.6 License:		BSD3@@ -105,6 +105,7 @@   tst/DH_hack.scm tst/DH_hack.tst tst/timestamping.scm tst/timestamping.tst   tst/ns-l.scm tst/ns-l.tst tst/pen-non-orig-test.scm   tst/pen-non-orig-test.tst tst/preprocess.scm tst/preprocess.tst+  tst/incompleteness_example.scm tst/incompleteness_example.tst  -- Algebra implementations must import CPSA.Lib.CPSA. -- Tools may additionally import CPSA.Lib.Entry.
doc/Makefile view
@@ -39,7 +39,7 @@ 	if test -f $(PRIMER).idx; then $(MAKE) $(PRIMER).ind; fi 	pdflatex $(PRIMER).tex -$(OVERVIEW).pdf: $(OVERVIEW).tex+$(OVERVIEW).pdf: $(OVERVIEW).tex $(OVERVIEW).bbl 	if test ! -f $(OVERVIEW).aux; then pdflatex $(OVERVIEW).tex; fi 	pdflatex $(OVERVIEW).tex
doc/cpsa.bib view
@@ -328,12 +328,24 @@     publisher = {Springer-Verlag} } -@Unpublished{ramsdell12,+@Unpublished{Ramsdell12,   author = 	 {John D. Ramsdell},   title = 	 {Deducing Security Goals From Shape Analysis Sentences},-  note = 	 {\url{http://arxiv.org/abs/1204.0480}},+  note = 	 {\url{http://arxiv.org/abs/1204.0480v1}},   OPTkey = 	 {},-  month = 	 apr,+  month = 	 jan,   year = 	 2012,   OPTannote = 	 {}+}++@TechReport{RamsdellEtAl09,+  author = 	 {John D. Ramsdell and Joshua D. Guttman and+                  Jonathan K. Millen and Brian O'Hanlon},+  title = 	 {An Analysis of the {CAVES} Attestation Protocol using {CPSA}},+  note = 	 {\url{http://arxiv.org/abs/1207.0418v1}},+  institution =  {The {MITRE} Corporation},+  month = 	 dec,+  year = 	 2009,+  type = 	 {{MITRE} Technical Report},+  number = 	 {{MTR090213}} }
doc/cpsadesign.pdf view

binary file changed (203156 → 203157 bytes)

doc/cpsadha.pdf view

binary file changed (129993 → 129996 bytes)

doc/cpsadiagrams.mp view
@@ -199,6 +199,46 @@   drawmsg(a3.e -- (beta * xpart o2.w, ypart a3.c)); endfig; +% Incompleteness example++% Initiator role++beginfig(6);+  % Backbone+  strand.a(2, origin, delta, btex $\mathstrut\mathit{init}$ etex, node);++  % Messages+  outbnd.a(1, dir_width, btex $\enc{N}{K}$ etex);+  inbnd.a(2, dir_width, btex $N$ etex);+endfig;++% Responder role++beginfig(7);+  % Backbone+  strand.a(2, origin, delta, btex $\mathstrut\mathit{resp}$ etex, node);++  % Messages+  rinbnd.a(1, dir_width, btex $\enc{N_1}{K}$ etex);+  routbnd.a(2, dir_width, btex $N_2$ etex);+endfig;++% Omitted run++beginfig(8);+  % Strand for principal A+  strand.a(2, origin, delta, btex $\mathstrut\mathit{init}$ etex, node);++  % Strand for principal B+  strand.b(2, .5w, delta, btex $\mathstrut\mathit{resp}$ etex, node);++  % Messages and arrows+  label.top(btex $\enc{N}{K}$ etex, .5[a1.e, b1.w]);+  drawmsg(a1.e -- b1.w);+  label.top(btex $N$ etex, .5[a2.e, b2.w]);+  drawmsg(b2.w -- a2.e);+endfig;+ verbatimtex \end{document} etex
doc/cpsaoverview.pdf view

binary file changed (76306 → 82378 bytes)

doc/cpsaoverview.tex view
@@ -1,5 +1,6 @@ \documentclass[12pt]{article} \usepackage{alltt}+\usepackage{url}  \newcommand{\cpsacopying}{\begingroup   \renewcommand{\thefootnote}{}\footnotetext{{\copyright} 2009 The@@ -23,7 +24,8 @@ \cpsacopying  Enclosed is a brief overview of CPSA, along with a description of-CPSA's support for the rely-guarantee method.  The message terms+CPSA's support for the rely-guarantee+method~\cite{GuttmanEtAl04,RamsdellEtAl09}.  The message terms \nterm{term} used by CPSA are a straightforward representation of terms using Lisp-style, prefix notation. @@ -334,5 +336,8 @@ non-trivial formula derived from the protocol. The obligations form presents every non-trivial formula that must be true if the shape is sound.++\bibliography{cpsa}+\bibliographystyle{plain}  \end{document}
doc/cpsaprimer.pdf view

binary file changed (187208 → 192999 bytes)

doc/cpsaprimer.tex view
@@ -17,6 +17,8 @@ \maketitle \cpsacopying +%\tableofcontents+ \begin{sloppypar} Analyzing a cryptographic protocol means finding out what security properties---essentially, authentication and secrecy properties---are@@ -27,24 +29,13 @@ authentication property that the protocol was intended to ensure. \end{sloppypar} -% Until bugs are fixed, comment this out:-\iffalse {\cpsa}, The Cryptographic Protocol Shapes Analyzer, is a software tool.  Given a protocol definition and some assumptions about-executions, it produces descriptions of all possible executions of the-protocol compatible with the assumptions.  Naturally, there are-infinitely many possible executions of a useful protocol, since-different participants can run it with varying parameters, and the-participants can run it repeatedly.-\else-{\cpsa}, The Cryptographic Protocol Shapes Analyzer, is a software-tool.  Given a protocol definition and some assumptions about executions, it attempts to produce descriptions of all possible executions of the protocol compatible with the assumptions. Naturally, there are infinitely many possible executions of a useful protocol, since different participants can run it with varying parameters, and the participants can run it repeatedly.-\fi  However, for many naturally occurring protocols, there are only finitely many of these runs that are essentially different.  Indeed,@@ -68,13 +59,16 @@ participant's ``point of view.''  The analysis reveals what the other participants must have done, given the first participant's view. -% When bugs are fixed, fix this too. The shapes analysis is performed within a pure Dolev-Yao model~\cite{DolevYao83}.  {\cpsa}'s search is based on a high-level-algorithm that claims to be complete, i.e.\@ every shape can in fact be-found in a finite number of steps~\cite{DoghmiGuttmanThayer07}.-{\cpsa}'s search has not been shown to be complete, a deficiency we-are committed to repair.+algorithm that was claimed to be complete, i.e.\@ every shape can in+fact be found in a finite number of+steps~\cite{DoghmiGuttmanThayer07,Guttman11}.  Further theoretical+work showed classes of executions that are not found by the algorithm,+however it also showed that every omitted execution requires an+unnatural interpretation of a protocol's roles.  Hence the algorithm+is complete relative to natural role semantics.+Appendix~\ref{sec:omitted executions} discusses omitted executions.  \section{Overview} @@ -1101,7 +1095,7 @@ \section{Macros}\label{sec:macros}  After reading the input, {\cpsa} expands macros before in analyzing-the results. A macro definition is a top-level form.+the results. A macro definition is a top-level form.\index{macros}  \begin{quote}\scshape (\texttt{\textup{defmacro}} (name arg${}^\ast$) body)@@ -1116,6 +1110,15 @@ takes precedence. The {\cpsa} program omits macro definitions from its output. +\section{Includes}\label{sec:include}++While performing macro expansion, {\cpsa} includes other source files+with the top-level include form,\index{includes}+\begin{quote}\scshape+(\texttt{\textup{include}} file)+\end{quote}+where \texttt{\scshape file} is a string.+ \section{Advice}\label{sec:advice}  This section contains advice derived from using {\cpsa}.  When@@ -1194,11 +1197,11 @@ The \texttt{cpsaannotations} program uses protocol annotations to annotate shapes and generate protocol soundness obligations for use with the rely-guarantee method of trust-management~\cite{guttmanEtAl04}.  The language of formulas is-order-sorted first-order logic extended with a modal says operator.-Formula terms may include function symbols that are not part of a-protocol's message signature.  The syntax of a formula is specified in-the {\cpsa} Overview~\cite{cpsaoverview09}.+management~\cite{GuttmanEtAl04,RamsdellEtAl09}.  The language of+formulas is order-sorted first-order logic extended with a modal says+operator.  Formula terms may include function symbols that are not+part of a protocol's message signature.  The syntax of a formula is+specified in the {\cpsa} Overview~\cite{cpsaoverview09}.  \section{Parameter Analysis}\label{sec:parameters} @@ -1220,6 +1223,39 @@ \section{BCA Syntax Reference}\label{sec:syntax reference}  \input{bcasyntax}++\section{Omitted Executions}\label{sec:omitted executions}++When given some initial behavior, the {\cpsa} program discovers what+shapes are compatible with it.  Early work claimed that the {\cpsa}+algorithm would generate every shape in a finite number of+steps~\cite{DoghmiGuttmanThayer07,Guttman11}.  Further theoretical+work showed classes of executions that are not found by the algorithm,+however it also showed that every omitted execution requires an+unnatural interpretation of a protocol's roles.  Hence the algorithm+is complete relative to natural role semantics.  We present an example+of a protocol that has a shape missed by {\cpsa}.++The protocol has an initiator role and a responder role.+\begin{center}+\includegraphics{cpsadiagrams-6.mps}\hfil+\includegraphics{cpsadiagrams-7.mps}+\end{center}++Observe that a natural interpretation of~$N_2$ in the responder role+is that a binding for it is known when an instance of the role begins+execution.++Consider a scenario in which there is an instance of the initiator+role where~$N$ is freshly generated and~$K^{-1}$ is uncompromised.+{\cpsa} will find no shapes compatible with the scenario, however what+follows is.+\begin{center}+\includegraphics{cpsadiagrams-8.mps}+\end{center}+Yet this shape requires that the message for~$N_2$ in an instance the+responder role be obtained from its first message reception---an+unnatural interpretation of the responder role.  \bibliography{cpsa} \bibliographystyle{plain}
doc/cpsaspec.pdf view

binary file changed (329325 → 329931 bytes)

doc/cpsaspec.tex view
@@ -135,19 +135,22 @@ formula is modeled by all skeletons that describe full runs of a protocol when {\cpsa} finds all the shapes for the problem. -Ideally, if there is a finite number of shapes associated with a-problem statement, {\cpsa} will find them given enough resources.  In-other words, the search is complete, i.e.\ every shape can in fact be-found in a finite number of steps.  The Completeness of {\cpsa}-document~\cite{cpsatheory11} contains our latest attempt at showing-the implemented search algorithm is complete.+{\cpsa}'s search is based on a high-level algorithm that was claimed+to be complete, i.e.\@ every shape can in fact be found in a finite+number of steps~\cite{DoghmiGuttmanThayer07,Guttman11}.  Further+theoretical work~\cite{cpsatheory11} showed classes of executions that+are not found by the algorithm, however it also showed that every+omitted execution requires an unnatural interpretation of a protocol's+roles.  Hence the algorithm is complete relative to natural role+semantics.  See~\cite[Appendix~B]{cpsaprimer09} for more on omitted+executions.  A {\cpsa} release includes two other documents, the {\cpsa} Design~\cite{cpsadesign09} and the {\cpsa} Primer~\cite{cpsaprimer09}. The design document describes details of the {\cpsa} implementation that would clutter this one.  It should be read by anyone interesting in reading and modifying the source code.  The-{\cpsa} Primer provides an overview of {\cpsa}, and may be worth+{\cpsa} Primer provides an overview of {\cpsa}, and is worth reading before this document is approached.  \section{Notation}\label{sec:notation}@@ -537,6 +540,9 @@   satisfy the conditions for being a part of a run of protocol~$P$. \item Relation $\prec$ is transitive, asymmetric, and includes the   strand succession relation $(\Rightarrow)$.+\item If $n\prec n'$, then either $n\Rightarrow n'$,+  $\evt_{\Theta_X}(n)=\outbnd t$ and   $\evt_{\Theta_X}(n')=\inbnd+  t'$, or $n\prec n''\prec n'$ for some~$n''$. \item Each atom in $N$ is carried by no event, and each variable   in the atom occurs in some event. \item Each atom in $U$ is carried by some event.
doc/cpsauser.html view
@@ -22,17 +22,17 @@ finitely many, indeed very few shapes. Authentication and secrecy properties are easy to determine from them, as are attacks and anomalies.</p> -<p>For each input problem, the CPSA program is given some initial behavior, and-it discovers what shapes are compatible with it. Normally, the initial behavior-is from the point of view of one participant. The analysis reveals what the-other participants must have done, given the participant's view. The search is-based on a high-level algorithm that claims to be complete, i.e. every shape can in-fact be found in a finite number of steps. The shapes analysis is-performed within a pure Dolev-Yao model, and the analyzer handles message terms-compatible with the signature of an Order Sorted Algebra. In this release, the-analyzer, <tt>cpsa</tt> handles two algebras, the Basic Cryptographic Algebra-and the Diffie-Hellman Algebra. The source release contains an interface-designed to ease the task of adding support for other message term algebras.</p>+<p>For each input problem, the CPSA program is given some initial+behavior, and it discovers what shapes are compatible with+it. Normally, the initial behavior is from the point of view of one+participant. The analysis reveals what the other participants must+have done, given the participant's view. The search is based on a+high-level algorithm that was claimed to be complete, i.e. every shape+can in fact be found in a finite number of steps. Further theoretical+work showed classes of executions that are not found by the algorithm,+however it also showed that every omitted execution requires an+unnatural interpretation of a protocol's roles.  Hence the algorithm+is complete relative to natural role semantics.</p>  <p>The analyzer is designed to work well with other tools. S-expressions are used for both input and output. The analyzer reads all the problems in its@@ -82,17 +82,18 @@  <p>The distribution comes with the file <a href="cpsa.mk"><tt>cpsa.mk</tt></a> for inclusion into your makefile. A sample makefile follows. If you-cut-and-paste from a browser window, but sure to convert the leading spaces in+cut-and-paste from a browser window, be sure to convert the leading spaces in the last line to a tab character.</p>  <blockquote>   <pre>CPSAFLAGS = +RTS -M512m -RTS -SRCS := $(wildcard *.scm)+SRCS := $(wildcard *.scm) $(wildcard *.lsp)  include cpsa.mk -all:    $(SRCS:%.scm=%_shapes.xhtml) $(SRCS:%.scm=%.xhtml)+all:    $(SRCS:%.scm=%_shapes.xhtml) $(SRCS:%.scm=%.xhtml) \+        $(SRCS:%.lsp=%_shapes.xhtml) $(SRCS:%.lsp=%.xhtml)  clean:         -rm *.txt *.xhtml</pre>@@ -233,7 +234,9 @@ <tt>(operation collapsed INT INT)</tt>, where the two <tt>INT</tt>s identify the strands merged. Shape collapsing is used to find related shapes.</p> -<p>The additional sorts and terms in the Diffie-Hellman Algebra follow.</p>+<p>The current Diffie-Hellman support is experimental and known to+have flaws. The additional sorts and terms in the Diffie-Hellman+Algebra follow.</p>  <blockquote>   <pre>SORT ::= ... | base | expn@@ -256,16 +259,15 @@   <pre>(exp (exp (gen) x) y) = (exp (exp (gen) y) x)</pre> </blockquote> -<p>Diffie-Hellman support is experimental and known to have-flaws. Avoid variables of sort base.</p>+<p>To avoid known Diffie-Hellman flaws, avoid variables of sort base.</p> -<h3>Macros</h3>+<h3>Macros and Includes</h3>  <p>After reading the input, <tt>cpsa</tt> expands macros before in analyzing the results. A macro definition is a top-level form.</p>  <blockquote>-  <pre>MACRO ::= (defmacro (NAME ARG*) BODY)</pre>+  <pre>(defmacro (NAME ARG*) BODY)</pre> </blockquote>  <p>The <tt>cpsa</tt> program expands all calls to macros in non-macro defining@@ -275,6 +277,16 @@ matches the length of the macro's argument list. When two macros definitions are applicable, the last definition takes precedence. The <tt>cpsa</tt> program omits macro definitions from its output.</p>++<p>A source file can be included within another with the top-level+include form,<p>++<blockquote>+  <pre>(include FILE)</pre>+</blockquote>++<p>where <tt>FILE</tt> is a string. The <tt>cpsa</tt> program+includes files while it does macro expansion.</p>  <h3 id="usage">Usage of CPSA</h3>
doc/macros.tex view
@@ -1,5 +1,5 @@ \newcommand{\cpsa}{\textsc{cpsa}}-\newcommand{\version}{2.2.10}+\newcommand{\version}{2.2.11} \newcommand{\cpsacopying}{\begingroup   \renewcommand{\thefootnote}{}\footnotetext{{\copyright} 2010 The     MITRE Corporation.  Permission to copy without fee all or part of
src/CPSA/Lib/Entry.hs view
@@ -267,8 +267,8 @@  -- Exception handling for IO errors tryIO :: IO a -> IO (Either String a)-tryIO x = -    do +tryIO x =+    do       y <- try x       case y of         Right x ->
src/CPSA/Lib/Expand.hs view
@@ -6,31 +6,70 @@ -- modify it under the terms of the BSD License as published by the -- University of California. -module CPSA.Lib.Expand (expand) where+module CPSA.Lib.Expand (expand, readSExprs) where  import Control.Monad+import System.IO (openFile, IOMode (ReadMode))+import CPSA.Lib.Entry (readSExpr, tryIO) import CPSA.Lib.CPSA  -- The macroexpand loop limit limit :: Int limit = 1000 -expand :: Monad m => [SExpr Pos] -> m [SExpr Pos]+-- Include bound+bound :: Int+bound = 16++expand :: [SExpr Pos] -> IO [SExpr Pos] expand sexprs =     do-      (_, sexprs) <- foldM expandSExpr ([], []) sexprs+      (_, sexprs) <- foldM (expandSExpr bound) ([], []) sexprs       return (reverse sexprs) -expandSExpr :: Monad m => ([Macro], [SExpr Pos]) -> SExpr Pos ->-               m ([Macro], [SExpr Pos])-expandSExpr (macs, sexprs) (L pos (S _ "defmacro" : xs)) =+expandSExpr :: Int -> ([Macro], [SExpr Pos]) -> SExpr Pos ->+               IO ([Macro], [SExpr Pos])+expandSExpr _ (macs, sexprs) (L pos (S _ "defmacro" : xs)) =     do                          -- Process a macro definition       mac <- defmacro pos xs       return (mac : macs, sexprs)-expandSExpr (macs, sexprs) sexpr =+expandSExpr bound (macs, sexprs) (L pos [S _ "include", Q _ file]) =+    if bound <= 0 then+      fail (shows pos ("Include depth exceeded with file " ++ file))+    else+      include (bound - 1) (macs, sexprs) pos file+expandSExpr _ (macs, sexprs) sexpr =     do                          -- Process all other S-expressions       sexpr <- expandAll macs sexpr       return (macs, sexpr : sexprs)++-- The include form is processed here.++include :: Int -> ([Macro], [SExpr Pos]) -> Pos -> String ->+           IO ([Macro], [SExpr Pos])+include bound (macs, sexprs) pos file =+    do+      input <- tryIO (openFile file ReadMode)+      case input of+        Left err -> fail (shows pos ("File " ++ file ++ ": " ++ err))+        Right input ->+          do+            p <- posHandle file input+            incsexprs <- readSExprs p+            foldM (expandSExpr bound) (macs, sexprs) incsexprs++readSExprs :: PosHandle -> IO [SExpr Pos]+readSExprs p =+    loop []+    where+      loop xs =+          do+            x <- readSExpr p+            case x of+              Nothing ->+                  return $ reverse xs+              Just x ->+                  loop (x:xs)  -- A macro definition is of the form: --
src/CPSA/Lib/Main.hs view
@@ -59,7 +59,7 @@         Left err -> abort err         Right sexprs ->             if optAnalyze opts then-                select herald opts sexprs+                select files herald opts sexprs             else                 prettyPrint opts sexprs @@ -84,19 +84,6 @@       msg <- usage options ["too many input files\n"]       abort msg -readSExprs :: PosHandle -> IO [SExpr Pos]-readSExprs p =-    loop []-    where-      loop xs =-          do-            x <- readSExpr p-            case x of-              Nothing ->-                  return $ reverse xs-              Just x ->-                  loop (x:xs)- -- Algebra specific section  -- Algebra names@@ -106,28 +93,28 @@         CPSA.SimpleDiffieHellman.Algebra.name]  -- Select the algebra and go.-select :: Maybe (SExpr Pos) -> Options -> [SExpr Pos] -> IO ()-select herald opts sexprs =+select :: [String] -> Maybe (SExpr Pos) -> Options -> [SExpr Pos] -> IO ()+select files herald opts sexprs =     case optAlg opts of       name | name == CPSA.Basic.Algebra.name ->                go name CPSA.Basic.Algebra.origin-                  herald opts sexprs+                  files herald opts sexprs            | name == CPSA.DiffieHellman.Algebra.name ->                go name CPSA.DiffieHellman.Algebra.origin-                  herald opts sexprs+                  files herald opts sexprs            | name == CPSA.DiffieHellmanNoReciprocal.Algebra.name ->                go name CPSA.DiffieHellmanNoReciprocal.Algebra.origin-                  herald opts sexprs+                  files herald opts sexprs            | name == CPSA.SimpleDiffieHellman.Algebra.name ->                go name CPSA.SimpleDiffieHellman.Algebra.origin-                  herald opts sexprs+                  files herald opts sexprs            | otherwise ->                abort ("Bad algebra: " ++ name)  -- Load protocols and preskeletons and print run time information-go :: Algebra t p g s e c => String -> g -> Maybe (SExpr Pos) ->-      Options -> [SExpr Pos] -> IO ()-go name origin herald opts sexprs =+go :: Algebra t p g s e c => String -> g -> [String] ->+      Maybe (SExpr Pos) -> Options -> [SExpr Pos] -> IO ()+go name origin files herald opts sexprs =     do       preskels <- tryIO (loadSExprs name origin sexprs)       case preskels of          -- Load protocols and preskeletons@@ -145,7 +132,9 @@                       hPutStrLn h ""               -- Print run time information               writeComment h m cpsaVersion-              writeComment h m "All input read"+              case files of+                [file] -> writeComment h m $ "All input read from " ++ file+                _ -> writeComment h m "All input read"               case optNoIsoChk opts of                 True -> writeComment h m "Isomorphism checking disabled"                 False -> return ()
src/CPSA/Lib/Reduction.hs view
@@ -159,45 +159,59 @@     if optNoIsoChk p then         fast p h ks m n todo     -- Peform no isomorphism checks     else-        breadth p h ks m n seen todo+        breadth p h ks m n seen todo [] +-- The main loop is implemented using breadth and step.  Tail calls+-- are used to ensure they do not add to the control stack.+ -- Function breadth handles one level of the derivation tree. -- This ensures a breadth first derivation order.+--+-- p is the runtime options+-- h is the output handle+-- ks is the list of problems+-- m is the step limit+-- n is the current step count+-- seen holds the gists of seen skeletons+-- todo holds unreduced skeletons+-- tobig holds skeletons that have exceed the strand bound. breadth :: Algebra t p g s e c => Options -> Handle ->            [Preskel t p g s e c] -> Int -> Int -> Seen t p g s e c ->-           [LPreskel t p g s e c] -> IO ()-breadth p h ks _ n _ [] =       -- Empty todo list+           [LPreskel t p g s e c] -> [LPreskel t p g s e c] -> IO ()+breadth p h ks _ n _ [] [] =       -- Empty todo list and tobig list     do       wrt p h (comment "Nothing left to do")       solve p h ks n            -- Solve next problem-breadth p h ks m n seen todo =-    step p h ks m seen n void [] (parMap (branch p seen) todo)+breadth p h _ _ _ _ [] tobig = -- Empty todo list and non-null tobig list+    do+      wrt p h (comment "Strand bound exceeded--aborting run")+      dump p h (reverse tobig)  "Strand bound exceeded"+breadth p h ks m n seen todo tobig =+    step p h ks m seen n void [] tobig (parMap (branch p seen) todo)  -- Function step handles one skeleton in one level of the tree. step :: Algebra t p g s e c => Options -> Handle ->         [Preskel t p g s e c] -> Int -> Seen t p g s e c -> Int ->         Seen t p g s e c -> [LPreskel t p g s e c] ->-        [Reduct t p g s e c] -> IO ()-step p h ks m oseen n seen todo [] = -- Empty reducts-    breadth p h ks m n (merge seen oseen) (reverse todo)-step p h _ m _ n _ todo reducts+        [LPreskel t p g s e c] -> [Reduct t p g s e c] -> IO ()+step p h ks m oseen n seen todo tobig [] = -- Empty reducts+    breadth p h ks m n (merge seen oseen) (reverse todo) tobig+step p h _ m _ n _ todo tobig reducts     | n > m =                   -- Check step count         do           wrt p h (comment "Step limit exceeded--aborting run")-          dump p h (mktodo reducts todo) "Step limit exceeded"-step p h _ _ _ _ _ todo reducts@(Reduct lk _ _  _  _ : _)+          dump p h (mktodo reducts todo tobig) "Step limit exceeded"+step p h ks m oseen n seen todo tobig (Reduct lk _ _  _  _ : reducts)     | nstrands (content lk) >= optBound p = -- Check strand count-        do-          wrt p h (comment "Strand bound exceeded--aborting run")-          dump p h (mktodo reducts todo)  "Strand bound exceeded"-step p h ks m oseen n seen todo (Reduct lk size cols kids dups : reducts)+        step p h ks m oseen n seen todo (lk : tobig) reducts+step p h ks m oseen n seen todo tobig (Reduct lk size cols kids dups : reducts)     | size <= 0 =               -- Interpret empty reducts         do           let ns = unrealized (content lk)           let shape = null ns           wrt p h  (commentPreskel lk [] ns shape                     (if shape then "" else "empty cohort"))-          step p h ks m oseen n seen todo reducts+          step p h ks m oseen n seen todo tobig reducts     | otherwise =         do           let (n', seen', todo', dups') =@@ -207,7 +221,7 @@           let msg = shows size $ showString " in cohort - " $                          shows u " not yet seen"           wrt p h  (commentPreskel lk (reverse dups') ns cols msg)-          step p h ks m oseen n' seen' todo' reducts+          step p h ks m oseen n' seen' todo' tobig reducts  -- Expands one branch in the derivation tree. branch :: Algebra t p g s e c => Options -> Seen t p g s e c ->@@ -245,9 +259,10 @@  -- Make a todo list for dump mktodo :: Algebra t p g s e c => [Reduct t p g s e c] ->-          [LPreskel t p g s e c] -> [LPreskel t p g s e c]-mktodo reducts todo =-    map (\(Reduct lk _ _ _ _) -> lk) reducts ++ reverse todo+          [LPreskel t p g s e c] -> [LPreskel t p g s e c] ->+          [LPreskel t p g s e c]+mktodo reducts todo tobig =+    map (\(Reduct lk _ _ _ _) -> lk) reducts ++ reverse todo ++ reverse tobig  type Next t p g s e c =     (Int, Seen t p g s e c, [LPreskel t p g s e c], [Int])
src/CPSA/Lib/Strand.hs view
@@ -70,10 +70,6 @@  -- Compile time switches for expermentation. --- Enable hulling.-useHulling :: Bool-useHulling = False -- True- -- Enable thinning, else use pruning. useThinning :: Bool useThinning = False -- True@@ -82,6 +78,7 @@ useSingleStrandThinning :: Bool useSingleStrandThinning = False -- True +-- Enable de-origination. -- Don't use de-origination without thinning although you may want to -- use thinning without de-origination. useDeOrigination :: Bool@@ -97,9 +94,6 @@ usePruningWhileSolving :: Bool usePruningWhileSolving = True -- False -usePrunedStrandNotInPOV :: Bool-usePrunedStrandNotInPOV = True -- False- useStrictPrecedesCheck :: Bool useStrictPrecedesCheck = False -- True @@ -109,9 +103,6 @@ useNoOrigPreservation :: Bool useNoOrigPreservation = False -- True -useHullingByCompression :: Bool-useHullingByCompression = True -- False- -- Instances and Strand Identifiers  -- An Instance is an instance of a role, in the sense that each@@ -1012,16 +1003,16 @@ -- This is the starting point of the Preskeleton Reduction System skeletonize :: Algebra t p g s e c => Bool -> PRS t p g s e c ->                [PRS t p g s e c]-skeletonize prune prs =-    if useHulling then-        hull prune prs-    else-        if twoOrigs then-            []-        else-            enrich prune prs-    where twoOrigs = any (\(_, l) -> length l > 1) (korig (skel prs))+skeletonize prune prs+    | useDeOrigination = hull prune prs+    -- Cull preskels with a unique origination assumption that is not unique+    | hasMultipleOrig prs = []  -- Usual case+    | otherwise = enrich prune prs +hasMultipleOrig :: Algebra t p g s e c => PRS t p g s e c -> Bool+hasMultipleOrig prs =+    any (\(_, l) -> length l > 1) (korig (skel prs))+ -- Hulling or Ensuring Unique Origination hull :: Algebra t p g s e c => Bool -> PRS t p g s e c ->         [PRS t p g s e c]@@ -1031,53 +1022,10 @@       -- No uniques originate on more than one strand       loop [] = enrich prune prs       -- Found a pair that needs hulling-      loop ((u, (s, i) : (s', i') : _) : _)-          |  useDeOrigination =-              hullByCompressing prune prs s s' +++      loop ((u, (s, i) : (s', i') : _) : _) =               hullByDeOrigination prune prs u (s, i) (s', i')-          | otherwise =-              hullByCompressing prune prs s s'       loop(_ : orig) = loop orig -hullByCompressing :: Algebra t p g s e c => Bool -> PRS t p g s e c ->-                     Sid -> Sid -> [PRS t p g s e c]-hullByCompressing prune prs s s' | useHullingByCompression =-    do-      (s'', s''', subst) <- unifyStrands (skel prs) s s'-      prs <- ksubst False prs subst-      prs' <- compress True prs s'' s'''-      hull prune prs'-hullByCompressing _ _ _ _ = []  -- Hulling by compression disabled---- See if two strands unify.  They can be of differing heights.  The--- second strand returned may be longer.-unifyStrands :: Algebra t p g s e c => Preskel t p g s e c ->-                Sid -> Sid -> [(Sid, Sid, (g, s))]-unifyStrands k s s' =-    let i = strandInst k s-        i' = strandInst k s' in-    if height i > height i' then-        unifyStrands k s' s-    else-        do-          (gen', subst) <- unifyTraces (trace i) (trace i') (gen k, emptySubst)-          return (s, s', (gen', subst))---- Unify traces where the first trace is allowed to be shorter than--- the second trace.-unifyTraces :: Algebra t p g s e c => Trace t p g s e c ->-               Trace t p g s e c -> (g, s) -> [(g, s)]-unifyTraces [] _ subst = [subst]-unifyTraces (In t : c) (In t' : c') subst =-    do-      s <- unify t t' subst-      unifyTraces c c' s-unifyTraces (Out t : c) (Out t' : c') subst =-    do-      s <- unify t t' subst-      unifyTraces c c' s-unifyTraces _ _ _ = []- -- De-Origination  hullByDeOrigination :: Algebra t p g s e c => Bool -> PRS t p g s e c ->@@ -1203,7 +1151,7 @@ pruneStrand prs s s' =     do       let k = skel prs-      case usePrunedStrandNotInPOV && elem s (prob k) && elem s' (prob k) of+      case elem s (prob k) && elem s' (prob k) of         True -> fail ""   -- Strands s and s' in image of POV skeleton         False -> return ()       env <- matchTraces@@ -1641,6 +1589,35 @@       prs <- ksubst False (k0, k { operation = op}, n, phi, hsubst) subst       prs <- compress True prs s s'       skeletonize usePruningWhileSolving prs++-- See if two strands unify.  They can be of differing heights.  The+-- second strand returned may be longer.+unifyStrands :: Algebra t p g s e c => Preskel t p g s e c ->+                Sid -> Sid -> [(Sid, Sid, (g, s))]+unifyStrands k s s' =+    let i = strandInst k s+        i' = strandInst k s' in+    if height i > height i' then+        unifyStrands k s' s+    else+        do+          (gen', subst) <- unifyTraces (trace i) (trace i') (gen k, emptySubst)+          return (s, s', (gen', subst))++-- Unify traces where the first trace is allowed to be shorter than+-- the second trace.+unifyTraces :: Algebra t p g s e c => Trace t p g s e c ->+               Trace t p g s e c -> (g, s) -> [(g, s)]+unifyTraces [] _ subst = [subst]+unifyTraces (In t : c) (In t' : c') subst =+    do+      s <- unify t t' subst+      unifyTraces c c' s+unifyTraces (Out t : c) (Out t' : c') subst =+    do+      s <- unify t t' subst+      unifyTraces c c' s+unifyTraces _ _ _ = []  addedToDisplaced :: Algebra t p g s e c => Operation t p g s e c ->                     Int -> Int -> Operation t p g s e c
tst/DH_hack.tst view
@@ -1,7 +1,7 @@ (herald "DH Hack" (bound 15)) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from DH_hack.scm") (comment "Strand count bounded at 15")  (defprotocol DH_hack basic
tst/blanchet.scm view
@@ -86,3 +86,46 @@   (non-orig (invk a) (invk b))   (uniq-orig s d)   (comment "From the responders's perspective, is the secret leaked?"))++(defprotocol blanchet-fixed basic+  (defrole init+    (vars (a b name) (s skey) (d data))+    (trace+     (send (enc (enc s b (privk a)) (pubk b)))+     (recv (enc d s))))+  (defrole resp+    (vars (a b name) (s skey) (d data))+    (trace+     (recv (enc (enc s b (privk a)) (pubk b)))+     (send (enc d s))))+  (comment "Fixed Blanchet's protocol using named asymmetric keys"))++(defskeleton blanchet-fixed+  (vars (a b name) (s skey) (d data))+  (defstrand init 2 (a a) (b b) (s s) (d d))+  (non-orig (privk b))+  (uniq-orig s)+  (comment "Analyze from the initiator's perspective"))++(defskeleton blanchet-fixed+  (vars (a b name) (s skey) (d data))+  (defstrand init 2 (a a) (b b) (s s) (d d))+  (deflistener d)+  (non-orig (privk b))+  (uniq-orig s d)+  (comment "From the initiator's perspective, is the secret leaked?"))++(defskeleton blanchet-fixed+  (vars (a b name) (s skey) (d data))+  (defstrand resp 2 (a a) (b b) (s s) (d d))+  (non-orig (privk a) (privk b))+  (uniq-orig s)+  (comment "Analyze from the responder's perspective"))++(defskeleton blanchet-fixed+  (vars (a b name) (s skey) (d data))+  (defstrand resp 2 (a a) (b b) (s s) (d d))+  (deflistener d)+  (non-orig (privk a) (privk b))+  (uniq-orig s d)+  (comment "From the responders's perspective, is the secret leaked?"))
tst/blanchet.tst view
@@ -1,8 +1,8 @@ (herald "Blanchet's Simple Example Protocol"   (comment "There is a flaw in this protocol by design")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from blanchet.scm")  (defprotocol blanchet basic   (defrole init@@ -535,5 +535,288 @@   (shape)   (maps ((0 1) ((a a) (b b) (s s) (d d))))   (origs (s (2 0)) (d (0 1))))++(comment "Nothing left to do")++(defprotocol blanchet-fixed basic+  (defrole init+    (vars (a b name) (s skey) (d data))+    (trace (send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s))))+  (defrole resp+    (vars (a b name) (s skey) (d data))+    (trace (recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s))))+  (comment "Fixed Blanchet's protocol using named asymmetric keys"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand init 2 (d d) (a a) (b b) (s s))+  (non-orig (privk b))+  (uniq-orig s)+  (comment "Analyze from the initiator's perspective")+  (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s))))+  (label 28)+  (unrealized (0 1))+  (origs (s (0 0)))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton blanchet-fixed+  (vars (d data) (a b a-0 b-0 name) (s skey))+  (defstrand init 2 (d d) (a a) (b b) (s s))+  (defstrand resp 2 (d d) (a a-0) (b b-0) (s s))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig s)+  (operation encryption-test (added-strand resp 2) (enc d s) (0 1))+  (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))+    ((recv (enc (enc s b-0 (privk a-0)) (pubk b-0))) (send (enc d s))))+  (label 29)+  (parent 28)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand init 2 (d d) (a a) (b b) (s s))+  (deflistener s)+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig s)+  (operation encryption-test (added-listener s) (enc d s) (0 1))+  (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))+    ((recv s) (send s)))+  (label 30)+  (parent 28)+  (unrealized (1 0))+  (comment "empty cohort"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand init 2 (d d) (a a) (b b) (s s))+  (defstrand resp 2 (d d) (a a) (b b) (s s))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig s)+  (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0)+    (enc (enc s b (privk a)) (pubk b)))+  (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))+    ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s))))+  (label 31)+  (parent 29)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (s s) (d d))))+  (origs (s (0 0))))++(comment "Nothing left to do")++(defprotocol blanchet-fixed basic+  (defrole init+    (vars (a b name) (s skey) (d data))+    (trace (send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s))))+  (defrole resp+    (vars (a b name) (s skey) (d data))+    (trace (recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s))))+  (comment "Fixed Blanchet's protocol using named asymmetric keys"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand init 2 (d d) (a a) (b b) (s s))+  (deflistener d)+  (non-orig (privk b))+  (uniq-orig d s)+  (comment "From the initiator's perspective, is the secret leaked?")+  (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))+    ((recv d) (send d)))+  (label 32)+  (unrealized (0 1))+  (origs (s (0 0)))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton blanchet-fixed+  (vars (d data) (a b a-0 b-0 name) (s skey))+  (defstrand init 2 (d d) (a a) (b b) (s s))+  (deflistener d)+  (defstrand resp 2 (d d) (a a-0) (b b-0) (s s))+  (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk b))+  (uniq-orig d s)+  (operation encryption-test (added-strand resp 2) (enc d s) (0 1))+  (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))+    ((recv d) (send d))+    ((recv (enc (enc s b-0 (privk a-0)) (pubk b-0))) (send (enc d s))))+  (label 33)+  (parent 32)+  (unrealized (1 0) (2 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand init 2 (d d) (a a) (b b) (s s))+  (deflistener d)+  (deflistener s)+  (precedes ((0 0) (2 0)) ((2 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig d s)+  (operation encryption-test (added-listener s) (enc d s) (0 1))+  (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))+    ((recv d) (send d)) ((recv s) (send s)))+  (label 34)+  (parent 32)+  (unrealized (2 0))+  (comment "empty cohort"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand init 2 (d d) (a a) (b b) (s s))+  (deflistener d)+  (defstrand resp 2 (d d) (a a) (b b) (s s))+  (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk b))+  (uniq-orig d s)+  (operation nonce-test (contracted (a-0 a) (b-0 b)) s (2 0)+    (enc (enc s b (privk a)) (pubk b)))+  (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))+    ((recv d) (send d))+    ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s))))+  (label 35)+  (parent 33)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand init 2 (d d) (a a) (b b) (s s))+  (deflistener d)+  (defstrand resp 2 (d d) (a a) (b b) (s s))+  (deflistener s)+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((2 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk b))+  (uniq-orig d s)+  (operation nonce-test (added-listener s) d (1 0) (enc d s))+  (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))+    ((recv d) (send d))+    ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))+    ((recv s) (send s)))+  (label 36)+  (parent 35)+  (unrealized (3 0))+  (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol blanchet-fixed basic+  (defrole init+    (vars (a b name) (s skey) (d data))+    (trace (send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s))))+  (defrole resp+    (vars (a b name) (s skey) (d data))+    (trace (recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s))))+  (comment "Fixed Blanchet's protocol using named asymmetric keys"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand resp 2 (d d) (a a) (b b) (s s))+  (non-orig (privk a) (privk b))+  (uniq-orig s)+  (comment "Analyze from the responder's perspective")+  (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s))))+  (label 37)+  (unrealized (0 0))+  (origs)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand resp 2 (d d) (a a) (b b) (s s))+  (defstrand init 1 (a a) (b b) (s s))+  (precedes ((1 0) (0 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig s)+  (operation encryption-test (added-strand init 1) (enc s b (privk a))+    (0 0))+  (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))+    ((send (enc (enc s b (privk a)) (pubk b)))))+  (label 38)+  (parent 37)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (s s) (d d))))+  (origs (s (1 0))))++(comment "Nothing left to do")++(defprotocol blanchet-fixed basic+  (defrole init+    (vars (a b name) (s skey) (d data))+    (trace (send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s))))+  (defrole resp+    (vars (a b name) (s skey) (d data))+    (trace (recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s))))+  (comment "Fixed Blanchet's protocol using named asymmetric keys"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand resp 2 (d d) (a a) (b b) (s s))+  (deflistener d)+  (non-orig (privk a) (privk b))+  (uniq-orig d s)+  (comment "From the responders's perspective, is the secret leaked?")+  (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))+    ((recv d) (send d)))+  (label 39)+  (unrealized (0 0) (1 0))+  (preskeleton)+  (comment "Not a skeleton"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand resp 2 (d d) (a a) (b b) (s s))+  (deflistener d)+  (precedes ((0 1) (1 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig d s)+  (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))+    ((recv d) (send d)))+  (label 40)+  (parent 39)+  (unrealized (0 0))+  (origs (d (0 1)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand resp 2 (d d) (a a) (b b) (s s))+  (deflistener d)+  (defstrand init 1 (a a) (b b) (s s))+  (precedes ((0 1) (1 0)) ((2 0) (0 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig d s)+  (operation encryption-test (added-strand init 1) (enc s b (privk a))+    (0 0))+  (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))+    ((recv d) (send d)) ((send (enc (enc s b (privk a)) (pubk b)))))+  (label 41)+  (parent 40)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton blanchet-fixed+  (vars (d data) (a b name) (s skey))+  (defstrand resp 2 (d d) (a a) (b b) (s s))+  (deflistener d)+  (defstrand init 1 (a a) (b b) (s s))+  (deflistener s)+  (precedes ((0 1) (1 0)) ((2 0) (0 0)) ((2 0) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig d s)+  (operation nonce-test (added-listener s) d (1 0) (enc d s))+  (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))+    ((recv d) (send d)) ((send (enc (enc s b (privk a)) (pubk b))))+    ((recv s) (send s)))+  (label 42)+  (parent 41)+  (unrealized (3 0))+  (comment "empty cohort"))  (comment "Nothing left to do")
tst/completeness-test.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from completeness-test.scm")  (defprotocol completeness-test basic   (defrole init
tst/crushing.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from crushing.scm")  (defprotocol crushing basic   (defrole init
tst/dass_simple.tst view
@@ -1,7 +1,7 @@ (herald "Distributed Authentication Security Service Protocol Variants") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from dass_simple.scm")  (defprotocol dass-simple basic   (defrole init
tst/denning-sacco.tst view
@@ -1,7 +1,7 @@ (herald "Denning-Sacco Protocol") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from denning-sacco.scm")  (defprotocol denning-sacco basic   (defrole init
tst/deorig_contract.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from deorig_contract.scm")  (defprotocol deorig-contract basic   (defrole init
tst/deorig_mesg.tst view
@@ -1,7 +1,7 @@ (herald deorig-mesg) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from deorig_mesg.scm")  (defprotocol deorig-mesg basic   (defrole init
tst/deorig_simple.tst view
@@ -1,7 +1,7 @@ (herald deorig-simple) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from deorig_simple.scm")  (defprotocol deorig-simple basic   (defrole init
tst/dh_cert.tst view
@@ -1,7 +1,7 @@ (herald "Diffie-Hellman with Certificate" (algebra diffie-hellman)) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from dh_cert.scm")  (defprotocol dh-cert diffie-hellman   (defrole ca
tst/dhke.tst view
@@ -1,7 +1,7 @@ (herald "Diffie-Hellman Key Exchange" (algebra diffie-hellman)) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from dhke.scm")  (defprotocol dhke diffie-hellman   (defrole init
tst/dy.tst view
@@ -1,1997 +1,4532 @@ (herald "Example 1.3 from 1983 Dolev-Yao Paper") -(comment "CPSA 2.2.10")-(comment "All input read")--(defprotocol dy basic-  (defrole init-    (vars (a b name) (m text))-    (trace (send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a)))))-  (defrole resp-    (vars (a b name) (m mesg))-    (trace (recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))))--(defskeleton dy-  (vars (m text) (a b name))-  (defstrand init 2 (m m) (a a) (b b))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a)))))-  (label 0)-  (unrealized (0 1))-  (origs (m (0 0)))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (b name))-  (defstrand init 2 (m m) (a b) (b b))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a b)) m (0 1)-    (enc (enc m (pubk b)) b (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b)))))-  (label 1)-  (parent 0)-  (unrealized)-  (shape)-  (maps ((0) ((a b) (b b) (m m))))-  (origs (m (0 0))))--(defskeleton dy-  (vars (m text) (a b name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (0 1)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 2)-  (parent 0)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (m m))))-  (origs (m (0 0))))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (0 1)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0)))))-  (label 3)-  (parent 0)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton dy-  (vars (m text) (b a name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-0 b)) m (0 1) (enc m (pubk b))-    (enc (enc m (pubk b)) b (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a)))))-  (label 4)-  (parent 3)-  (seen 1)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (0 1) (enc m (pubk b))-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))-  (label 5)-  (parent 3)-  (seen 8)-  (unrealized (2 0))-  (comment "4 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-1 a)) m (2 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 6)-  (parent 5)-  (seen 2)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 7)-  (parent 5)-  (seen 12)-  (unrealized (2 0))-  (comment "5 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 3 1 resp 2) m (2 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))-  (label 8)-  (parent 5)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (m m))))-  (origs (m (0 0))))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-1 a)) m (2 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 9)-  (parent 7)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (b a a-0 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 4 1 resp 2) m (2 0)-    (enc (enc m (pubk a-1)) b (pubk a-1))-    (enc (enc m (pubk b)) a-1 (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 10)-  (parent 7)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))-  (label 11)-  (parent 7)-  (seen 10 15 16)-  (unrealized (2 0) (4 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 4 1 resp 2) m (2 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 12)-  (parent 7)-  (seen 6)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 13)-  (parent 9)-  (seen 2)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (b a name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation generalization deleted (2 0))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 14)-  (parent 10)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 5 3 resp 2) m (4 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))-  (label 15)-  (parent 11)-  (seen 19 21)-  (unrealized (2 0))-  (comment "7 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 5 1 resp 2) m (4 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))-  (label 16)-  (parent 11)-  (unrealized (4 0))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (b name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 17)-  (parent 14)-  (seen 1)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))-  (label 18)-  (parent 15)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)-    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))-      (send (enc (enc m (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1)))))-  (label 19)-  (parent 15)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))-  (label 20)-  (parent 15)-  (seen 19 29)-  (unrealized (5 0))-  (comment "6 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 5 1 resp 2) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))-  (label 21)-  (parent 15)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (2 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-2 b)) m (4 0) (enc m (pubk b))-    (enc (enc m (pubk b)) b (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1)))))-  (label 22)-  (parent 16)-  (seen 10)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 5 3 resp 2) m (4 0) (enc m (pubk b))-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))-  (label 23)-  (parent 16)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (4 0) (enc m (pubk b))-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))-      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))-  (label 24)-  (parent 16)-  (seen 23 33 34)-  (unrealized (5 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0)))))-  (label 25)-  (parent 18)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a a-0 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0)))))-  (label 26)-  (parent 19)-  (seen 4)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 3 resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))-  (label 27)-  (parent 20)-  (seen 30 40)-  (unrealized (5 0))-  (comment "7 in cohort - 5 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 28)-  (parent 20)-  (seen 30 38 44)-  (unrealized (5 0))-  (comment "7 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 1 resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))-  (label 29)-  (parent 20)-  (seen 40)-  (unrealized (5 0))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton dy-  (vars (m text) (a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a-2) (b a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (4 0))-    ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation nonce-test (displaced 6 4 resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))-      (send (enc (enc m (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))-      (send (enc (enc m (pubk a-2)) a (pubk a-2)))))-  (label 30)-  (parent 20)-  (seen 19)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0))-    ((3 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (2 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))-  (label 31)-  (parent 21)-  (seen 35)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (3 0)) ((2 1) (3 0))-    ((3 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (2 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))-  (label 32)-  (parent 23)-  (seen 35)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 3 resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))-      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))-  (label 33)-  (parent 24)-  (seen 50)-  (unrealized (5 0))-  (comment "5 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 1 resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))-      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))-  (label 34)-  (parent 24)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0)))))-  (label 35)-  (parent 25)-  (seen 2)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a b) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-3 b)) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b)))))-  (label 36)-  (parent 27)-  (seen 53 54)-  (unrealized (2 0))-  (comment "6 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 1 resp 2) m (5 0)-    (enc (enc m (pubk a-3)) b (pubk a-3))-    (enc (enc m (pubk b)) a-3 (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))-  (label 37)-  (parent 27)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 4 resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))-  (label 38)-  (parent 27)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))-    ((5 1) (2 0)) ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))-  (label 39)-  (parent 27)-  (seen 37 38 58)-  (unrealized (6 0))-  (comment "6 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 1 resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))-  (label 40)-  (parent 27)-  (seen 37)-  (unrealized (5 0))-  (comment "5 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a b) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-3 b)) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 41)-  (parent 28)-  (seen 64 65)-  (unrealized (2 0))-  (comment "7 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 7 1 resp 2) m (5 0)-    (enc (enc m (pubk a-3)) b (pubk a-3))-    (enc (enc m (pubk b)) a-3 (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 42)-  (parent 28)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(comment "Strand bound exceeded--aborting run")--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((0 0) (7 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))-  (label 43)-  (parent 28)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 7 1 resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 44)-  (parent 28)-  (unrealized (5 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-3 b)) m (5 0) (enc m (pubk b))-    (enc (enc m (pubk b)) b (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))-  (label 45)-  (parent 29)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m m) (a a-4) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0) (enc m (pubk b))-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))-      (send (enc (enc m (pubk a-4)) b (pubk a-4)))))-  (label 46)-  (parent 29)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-3 a)) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 47)-  (parent 33)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 1 resp 2) m (5 0)-    (enc (enc m (pubk a-3)) b (pubk a-3))-    (enc (enc m (pubk b)) a-3 (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))-  (label 48)-  (parent 33)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))-      (send (enc (enc m (pubk a-3)) b (pubk a-3))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))-  (label 49)-  (parent 33)-  (unrealized (5 0) (6 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 1 resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))-      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))-  (label 50)-  (parent 33)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (2 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))-  (label 51)-  (parent 34)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a b) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b)))))-  (label 52)-  (parent 36)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)-    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))-      (send (enc (enc m (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a)))))-  (label 53)-  (parent 36)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a b) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 1 resp 2) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b)))))-  (label 54)-  (parent 36)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation generalization deleted (2 0))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))-  (label 55)-  (parent 37)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a-2) (b a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (4 0))-    ((4 1) (1 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))-      (send (enc (enc m (pubk a-2)) a (pubk a-2)))))-  (label 56)-  (parent 38)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))-    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (6 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (6 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 57)-  (parent 39)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 7 1 resp 2) m (6 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))-  (label 58)-  (parent 39)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a-2) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-3) (b a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (5 0))-    ((4 1) (1 0)) ((5 1) (4 0)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation nonce-test (displaced 7 4 resp 2) m (6 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))-      (send (enc (enc m (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))-      (send (enc (enc m (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-3 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-3)) a (pubk a-3)))))-  (label 59)-  (parent 39)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a b) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-3 b)) m (5 0) (enc m (pubk b))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b)))))-  (label 60)-  (parent 40)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 4 resp 2) m (5 0) (enc m (pubk b))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))-  (label 61)-  (parent 40)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))-    ((5 1) (2 0)) ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0) (enc m (pubk b))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))-  (label 62)-  (parent 40)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a b) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 63)-  (parent 41)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (3 0))-    ((3 1) (1 0)) ((4 1) (1 0)) ((5 1) (4 0)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)-    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))-      (send (enc (enc m (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a)))))-  (label 64)-  (parent 41)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a b) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 7 1 resp 2) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 65)-  (parent 41)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation generalization deleted (2 0))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 66)-  (parent 42)-  (unrealized)+(comment "CPSA 2.2.11")+(comment "All input read from dy.lsp")++(defprotocol dy basic+  (defrole init+    (vars (a b name) (m text))+    (trace (send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a)))))+  (defrole resp+    (vars (a b name) (m mesg))+    (trace (recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))))++(defskeleton dy+  (vars (m text) (a b name))+  (defstrand init 2 (m m) (a a) (b b))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a)))))+  (label 0)+  (unrealized (0 1))+  (origs (m (0 0)))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (b name))+  (defstrand init 2 (m m) (a b) (b b))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a b)) m (0 1)+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b)))))+  (label 1)+  (parent 0)+  (unrealized)+  (shape)+  (maps ((0) ((a b) (b b) (m m))))+  (origs (m (0 0))))++(defskeleton dy+  (vars (m text) (a b name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (0 1)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 2)+  (parent 0)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (m m))))+  (origs (m (0 0))))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (0 1)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0)))))+  (label 3)+  (parent 0)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (b a name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-0 b)) m (0 1) (enc m (pubk b))+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a)))))+  (label 4)+  (parent 3)+  (seen 1)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (0 1) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 5)+  (parent 3)+  (seen 8)+  (unrealized (2 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-1 a)) m (2 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 6)+  (parent 5)+  (seen 2)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (2 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 7)+  (parent 5)+  (seen 12)+  (unrealized (2 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 3 1 resp 2) m (2 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 8)+  (parent 5)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (m m))))+  (origs (m (0 0))))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-1 a)) m (2 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 9)+  (parent 7)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 4 1 resp 2) m (2 0)+    (enc (enc m (pubk a-1)) b (pubk a-1))+    (enc (enc m (pubk b)) a-1 (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 10)+  (parent 7)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (2 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 11)+  (parent 7)+  (seen 10 15 16)+  (unrealized (2 0) (4 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 4 1 resp 2) m (2 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 12)+  (parent 7)+  (seen 6)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 13)+  (parent 9)+  (seen 2)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (b a name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 14)+  (parent 10)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 5 3 resp 2) m (4 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 15)+  (parent 11)+  (seen 19 21)+  (unrealized (2 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 5 1 resp 2) m (4 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 16)+  (parent 11)+  (unrealized (4 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (b name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 17)+  (parent 14)+  (seen 1)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))+  (label 18)+  (parent 15)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)+    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1)))))+  (label 19)+  (parent 15)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 20)+  (parent 15)+  (seen 19 29)+  (unrealized (5 0))+  (comment "6 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 5 1 resp 2) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 21)+  (parent 15)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-2 b)) m (4 0) (enc m (pubk b))+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1)))))+  (label 22)+  (parent 16)+  (seen 10)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 5 3 resp 2) m (4 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 23)+  (parent 16)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (4 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 24)+  (parent 16)+  (seen 23 33 34)+  (unrealized (5 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0)))))+  (label 25)+  (parent 18)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0)))))+  (label 26)+  (parent 19)+  (seen 4)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 3 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 27)+  (parent 20)+  (seen 30 40)+  (unrealized (5 0))+  (comment "7 in cohort - 5 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 28)+  (parent 20)+  (seen 30 38 44)+  (unrealized (5 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 29)+  (parent 20)+  (seen 40)+  (unrealized (5 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (4 0))+    ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (displaced 6 4 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2)))))+  (label 30)+  (parent 20)+  (seen 19)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))+  (label 31)+  (parent 21)+  (seen 35)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (3 0)) ((2 1) (3 0))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))+  (label 32)+  (parent 23)+  (seen 35)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 3 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 33)+  (parent 24)+  (seen 50)+  (unrealized (5 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 34)+  (parent 24)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0)))))+  (label 35)+  (parent 25)+  (seen 2)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 36)+  (parent 27)+  (seen 53 54)+  (unrealized (2 0))+  (comment "6 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk a-3)) b (pubk a-3))+    (enc (enc m (pubk b)) a-3 (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 37)+  (parent 27)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 4 resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 38)+  (parent 27)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 39)+  (parent 27)+  (seen 37 38 58)+  (unrealized (6 0))+  (comment "6 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 40)+  (parent 27)+  (seen 37)+  (unrealized (5 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 41)+  (parent 28)+  (seen 64 65)+  (unrealized (2 0))+  (comment "7 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (5 0)+    (enc (enc m (pubk a-3)) b (pubk a-3))+    (enc (enc m (pubk b)) a-3 (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 42)+  (parent 28)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 44)+  (parent 28)+  (seen 42 61)+  (unrealized (5 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 45)+  (parent 29)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4)))))+  (label 46)+  (parent 29)+  (seen 44 72)+  (unrealized (6 0))+  (comment "6 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 a)) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 47)+  (parent 33)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk a-3)) b (pubk a-3))+    (enc (enc m (pubk b)) a-3 (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 48)+  (parent 33)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 49)+  (parent 33)+  (seen 48 76 77)+  (unrealized (5 0) (6 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 50)+  (parent 33)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 51)+  (parent 34)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 52)+  (parent 36)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)+    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a)))))+  (label 53)+  (parent 36)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 54)+  (parent 36)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 55)+  (parent 37)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (4 0))+    ((4 1) (1 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2)))))+  (label 56)+  (parent 38)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 58)+  (parent 39)+  (unrealized (6 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-3) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 1) (1 0)) ((5 1) (4 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (displaced 7 4 resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-3 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-3)) a (pubk a-3)))))+  (label 59)+  (parent 39)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 60)+  (parent 40)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 4 resp 2) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 61)+  (parent 40)+  (seen 56)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 62)+  (parent 40)+  (seen 37 58 59 61)+  (unrealized (6 0))+  (comment "6 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 63)+  (parent 41)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (3 0))+    ((3 1) (1 0)) ((4 1) (1 0)) ((5 1) (4 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)+    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a)))))+  (label 64)+  (parent 41)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 65)+  (parent 41)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 66)+  (parent 42)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 67)+  (parent 44)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 69)+  (parent 45)+  (seen 83)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 3 resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4)))))+  (label 70)+  (parent 46)+  (seen 73 100)+  (unrealized (6 0))+  (comment "7 in cohort - 5 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4)))))+  (label 72)+  (parent 46)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 1) (1 0)) ((5 1) (4 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (displaced 7 4 resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 73)+  (parent 46)+  (seen 30)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (3 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 74)+  (parent 47)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 75)+  (parent 48)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 3 resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 76)+  (parent 49)+  (seen 105 107)+  (unrealized (5 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 77)+  (parent 49)+  (unrealized (6 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 78)+  (parent 50)+  (seen 79)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 79)+  (parent 51)+  (seen 8)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 80)+  (parent 52)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a)))))+  (label 81)+  (parent 53)+  (seen 14)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 82)+  (parent 54)+  (seen 111)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 83)+  (parent 55)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a-1) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a-1 (pubk a)))+      (send (enc (enc m (pubk a-1)) a (pubk a-1)))))+  (label 84)+  (parent 56)+  (seen 35)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-4 b)) m (6 0) (enc m (pubk b))+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-3 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-3)) b (pubk a-3)))))+  (label 85)+  (parent 58)+  (seen 37)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 3 resp 2) m (6 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-3 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-3)) a (pubk a-3)))))+  (label 86)+  (parent 58)+  (seen 56)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a-1) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))+    ((4 1) (3 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a-1 (pubk a)))+      (send (enc (enc m (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-2)) a (pubk a-2)))))+  (label 88)+  (parent 59)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 89)+  (parent 60)+  (seen 111)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (3 0))+    ((3 1) (1 0)) ((4 1) (1 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 91)+  (parent 63)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a)))))+  (label 92)+  (parent 64)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 93)+  (parent 65)+  (seen 114)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (4 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 94)+  (parent 66)+  (seen 10)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 95)+  (parent 67)+  (seen 114)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-4 a)) m (6 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 96)+  (parent 70)+  (seen 117)+  (unrealized (5 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (6 0)+    (enc (enc m (pubk a-4)) b (pubk a-4))+    (enc (enc m (pubk b)) a-4 (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 97)+  (parent 70)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (6 0)) ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 4 resp 2) m (6 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4)))))+  (label 98)+  (parent 70)+  (seen 73 123)+  (unrealized (6 0))+  (comment "7 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (6 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4)))))+  (label 100)+  (parent 70)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (5 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 101)+  (parent 72)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 102)+  (parent 74)+  (seen 35)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 103)+  (parent 75)+  (seen 112)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-4 a)) m (5 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-3 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-3)) a (pubk a-3)))))+  (label 104)+  (parent 76)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-3) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (5 0)) ((3 1) (1 0))+    ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (contracted (b a) (a-4 a-3)) m (5 0)+    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-3 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-3)) a (pubk a-3)))))+  (label 105)+  (parent 76)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (5 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 107)+  (parent 76)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)) ((6 1) (5 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-4 b)) m (6 0) (enc m (pubk b))+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-3 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-3)) b (pubk a-3)))))+  (label 108)+  (parent 77)+  (seen 48)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 3 resp 2) m (6 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 109)+  (parent 77)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 111)+  (parent 80)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0)))))+  (label 112)+  (parent 83)+  (seen 4)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a-1) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a-1 (pubk a)))+      (send (enc (enc m (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-2)) a (pubk a-2)))))+  (label 113)+  (parent 88)+  (seen 112)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 114)+  (parent 91)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a)))))+  (label 115)+  (parent 92)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 116)+  (parent 96)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 117)+  (parent 96)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (5 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 4 resp 2) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 118)+  (parent 96)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (5 0)) ((2 1) (3 0))+    ((2 1) (5 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 120)+  (parent 97)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (6 0)) ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-4 a)) m (6 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 121)+  (parent 98)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (6 0)) ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (6 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4)))))+  (label 123)+  (parent 98)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (5 0)) ((2 1) (3 0))+    ((2 1) (5 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 124)+  (parent 100)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (3 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk a)) a-1 (pubk a)))+      (send (enc (enc m (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 125)+  (parent 101)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (3 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 126)+  (parent 104)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a-1) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))+    ((4 1) (3 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a-1 (pubk a)))+      (send (enc (enc m (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-2)) a (pubk a-2)))))+  (label 127)+  (parent 105)+  (seen 103)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-3 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-3)) a (pubk a-3)))))+  (label 128)+  (parent 107)+  (seen 21)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (5 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-3 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-3)) a (pubk a-3)))))+  (label 129)+  (parent 109)+  (seen 23)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 130)+  (parent 111)+  (seen 2)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 131)+  (parent 114)+  (seen 130)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a)))))+  (label 132)+  (parent 115)+  (seen 17)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((2 1) (5 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 133)+  (parent 116)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((2 1) (5 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 134)+  (parent 117)+  (seen 94)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (4 0)) ((4 1) (1 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 135)+  (parent 118)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 136)+  (parent 120)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 1) (1 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 137)+  (parent 121)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (5 0)) ((2 1) (3 0))+    ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 138)+  (parent 123)+  (seen 139)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (3 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk a)) a-1 (pubk a)))+      (send (enc (enc m (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 139)+  (parent 124)+  (seen 140)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a-1 (pubk a)))+      (send (enc (enc m (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 140)+  (parent 125)+  (seen 8)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))+  (label 141)+  (parent 126)+  (seen 25)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 142)+  (parent 133)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a-1 (pubk a)))+      (send (enc (enc m (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 143)+  (parent 135)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 144)+  (parent 136)+  (seen 112)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a-1 (pubk a)))+      (send (enc (enc m (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 145)+  (parent 137)+  (seen 25)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 146)+  (parent 142)+  (seen 130)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (3 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 147)+  (parent 143)+  (seen 13)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(comment "Strand bound exceeded--aborting run")++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((0 0) (7 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 43)+  (parent 28)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 57)+  (parent 39)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((0 0) (7 0))+    ((1 1) (5 0)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 68)+  (parent 44)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 71)+  (parent 46)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 a-5 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (defstrand resp 2 (m m) (a a-5) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (6 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4))))+    ((recv (enc (enc m (pubk b)) a-5 (pubk b)))+      (send (enc (enc m (pubk a-5)) b (pubk a-5)))))+  (label 87)+  (parent 58)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 90)+  (parent 62)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 a-5 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-5) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (6 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-5 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-5)) a (pubk a-5)))))+  (label 99)+  (parent 70)+  (unrealized (6 0) (7 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 a-5 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (defstrand resp 2 (m m) (a a-5) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4))))+    ((recv (enc (enc m (pubk a)) a-5 (pubk a)))+      (send (enc (enc m (pubk a-5)) a (pubk a-5)))))+  (label 106)+  (parent 76)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 a-5 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (defstrand resp 2 (m m) (a a-5) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (6 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4))))+    ((recv (enc (enc m (pubk b)) a-5 (pubk b)))+      (send (enc (enc m (pubk a-5)) b (pubk a-5)))))+  (label 110)+  (parent 77)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 119)+  (parent 96)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 a-5 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (defstrand resp 2 (m m) (a a-5) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (6 0)) ((5 1) (2 0))+    ((6 1) (5 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (6 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4))))+    ((recv (enc (enc m (pubk a)) a-5 (pubk a)))+      (send (enc (enc m (pubk a-5)) a (pubk a-5)))))+  (label 122)+  (parent 98)+  (unrealized (7 0))   (comment "aborted"))
tst/encsig.tst view
@@ -1,8 +1,8 @@ (herald "Encrypted Signed Message Example"   (comment "Shows examples of key usage of asymmetric keys")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from encsig.scm")  (defprotocol mult-keys-enc-sig basic   (defrole init
tst/epmo-hash.tst view
@@ -1,8 +1,8 @@ (herald "Electronic Purchase with Money Order Protocol with Key Hashing"   (comment "Annotated with trust management formulas")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from epmo-hash.scm")  (defprotocol epmo basic   (defrole bank
tst/epmo-key-hash.tst view
@@ -1,8 +1,8 @@ (herald "Electronic Purchase with Money Order Protocol with Key Hashing"   (comment "Annotated with trust management formulas")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from epmo-key-hash.scm")  (defprotocol epmo basic   (defrole bank
tst/epmo.tst view
@@ -1,8 +1,8 @@ (herald "Electronic Purchase with Money Order Protocol"   (comment "Annotated with trust management formulas")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from epmo.scm")  (defprotocol epmo basic   (defrole bank
tst/epmo_acctnum-key-hash.tst view
@@ -2,8 +2,8 @@   "Electronic Purchase with Money Order Protocol Variant with Key Hashing"   (comment "This version includes account numbers in exchanges")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from epmo_acctnum-key-hash.scm")  (defprotocol epmo_acctnum basic   (defrole bank
tst/epmo_acctnum.tst view

file too large to diff

tst/ffgg.tst view
@@ -1,8 +1,8 @@ (herald "The ffgg Protocol"   (comment "From A Necessarily Parallel Attack by Jon K. Millen")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from ffgg.scm")  (defprotocol ffgg basic   (defrole init
tst/fragile_pruning.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from fragile_pruning.scm")  (defprotocol fragile_pruning basic   (defrole init
tst/hashtest-key-hash.tst view
@@ -1,7 +1,7 @@ (herald "Hashtest") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from hashtest-key-hash.scm")  (defprotocol hashtest basic   (defrole init
tst/hashtest.tst view
@@ -1,7 +1,7 @@ (herald "Hashtest") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from hashtest.scm")  (defprotocol hashtest basic   (defrole init
+ tst/incompleteness_example.scm view
@@ -0,0 +1,21 @@+(herald incompleteness-example+  (comment "Shows a shape not found by CPSA"))++(defprotocol incompleteness-example basic+  (defrole init (vars (k akey) (n text))+    (trace (send (enc n k)) (recv n))+    (uniq-orig n))+  (defrole resp (vars (k akey) (n1 n2 text))+    (trace (recv (enc n1 k)) (send n2))))++(defskeleton incompleteness-example+  (vars (k akey))+  (defstrand init 2 (k k))+  (non-orig (invk k)))++(defskeleton incompleteness-example+  (vars (k akey) (n text))+  (defstrand init 2 (k k) (n n))+  (defstrand resp 2 (k k) (n1 n) (n2 n))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (comment "A shape compatible with the first problem in this run"))
+ tst/incompleteness_example.tst view
@@ -0,0 +1,52 @@+(herald incompleteness-example+  (comment "Shows a shape not found by CPSA"))++(comment "CPSA 2.2.11")+(comment "All input read from incompleteness-example.scm")++(defprotocol incompleteness-example basic+  (defrole init+    (vars (k akey) (n text))+    (trace (send (enc n k)) (recv n))+    (uniq-orig n))+  (defrole resp+    (vars (k akey) (n1 n2 text))+    (trace (recv (enc n1 k)) (send n2))))++(defskeleton incompleteness-example+  (vars (n text) (k akey))+  (defstrand init 2 (n n) (k k))+  (non-orig (invk k))+  (uniq-orig n)+  (traces ((send (enc n k)) (recv n)))+  (label 0)+  (unrealized (0 1))+  (origs (n (0 0)))+  (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol incompleteness-example basic+  (defrole init+    (vars (k akey) (n text))+    (trace (send (enc n k)) (recv n))+    (uniq-orig n))+  (defrole resp+    (vars (k akey) (n1 n2 text))+    (trace (recv (enc n1 k)) (send n2))))++(defskeleton incompleteness-example+  (vars (n text) (k akey))+  (defstrand init 2 (n n) (k k))+  (defstrand resp 2 (n1 n) (n2 n) (k k))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (uniq-orig n)+  (comment "A shape compatible with the first problem in this run")+  (traces ((send (enc n k)) (recv n)) ((recv (enc n k)) (send n)))+  (label 1)+  (unrealized)+  (shape)+  (maps ((0 1) ((k k) (n n))))+  (origs (n (0 0))))++(comment "Nothing left to do")
tst/isoreject.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from isoreject.scm")  (defprotocol isoreject basic   (defrole init
tst/kelly1.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from kelly1.scm")  (defprotocol kelly1 basic   (defrole client
tst/kerberos.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from kerberos.scm")  (defprotocol kerberos basic   (defrole init
tst/mass.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from mass.lsp")  (defprotocol mass basic   (defrole init
tst/mass2.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from mass2.lsp")  (defprotocol mass2 basic   (defrole init@@ -491,23 +491,20 @@   (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))   (origs (n1 (0 1)))) -(comment "Strand bound exceeded--aborting run")- (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 n2-5 n2-6 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))   (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))   (defstrand init 3 (n1 n2-2) (n2 n2-3) (a a) (b b))   (defstrand init 3 (n1 n2-3) (n2 n2-4) (a a) (b b))-  (defstrand init 3 (n1 n2-4) (n2 n2-5) (a a) (b b))-  (defstrand init 3 (n1 n2-5) (n2 n2-6) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))-    ((4 2) (3 1)) ((5 2) (4 1)) ((6 2) (5 1)) ((7 2) (6 1)))+  (defstrand init 3 (n1 n2-4) (n2 n2) (a a) (b b))+  (precedes ((0 1) (6 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))+    ((4 2) (3 1)) ((5 2) (4 1)) ((6 2) (5 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (added-strand init 3) (enc n2-5 (ltk a b))+  (operation encryption-test (displaced 7 0 resp 2) (enc n2-5 (ltk a b))     (6 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -522,29 +519,32 @@       (send (enc n2-2 (ltk a b))))     ((send (cat a n2-4)) (recv (cat n2-3 (enc n2-4 (ltk a b))))       (send (enc n2-3 (ltk a b))))-    ((send (cat a n2-5)) (recv (cat n2-4 (enc n2-5 (ltk a b))))-      (send (enc n2-4 (ltk a b))))-    ((send (cat a n2-6)) (recv (cat n2-5 (enc n2-6 (ltk a b))))-      (send (enc n2-5 (ltk a b)))))-  (label 18)+    ((send (cat a n2)) (recv (cat n2-4 (enc n2 (ltk a b))))+      (send (enc n2-4 (ltk a b)))))+  (label 19)   (parent 15)-  (unrealized (7 1))-  (comment "aborted"))+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))+  (origs (n1 (0 1)))) +(comment "Strand bound exceeded--aborting run")+ (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 n2-5 n2-6 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))   (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))   (defstrand init 3 (n1 n2-2) (n2 n2-3) (a a) (b b))   (defstrand init 3 (n1 n2-3) (n2 n2-4) (a a) (b b))-  (defstrand init 3 (n1 n2-4) (n2 n2) (a a) (b b))-  (precedes ((0 1) (6 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))-    ((4 2) (3 1)) ((5 2) (4 1)) ((6 2) (5 1)))+  (defstrand init 3 (n1 n2-4) (n2 n2-5) (a a) (b b))+  (defstrand init 3 (n1 n2-5) (n2 n2-6) (a a) (b b))+  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))+    ((4 2) (3 1)) ((5 2) (4 1)) ((6 2) (5 1)) ((7 2) (6 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (displaced 7 0 resp 2) (enc n2-5 (ltk a b))+  (operation encryption-test (added-strand init 3) (enc n2-5 (ltk a b))     (6 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -559,11 +559,13 @@       (send (enc n2-2 (ltk a b))))     ((send (cat a n2-4)) (recv (cat n2-3 (enc n2-4 (ltk a b))))       (send (enc n2-3 (ltk a b))))-    ((send (cat a n2)) (recv (cat n2-4 (enc n2 (ltk a b))))-      (send (enc n2-4 (ltk a b)))))-  (label 19)+    ((send (cat a n2-5)) (recv (cat n2-4 (enc n2-5 (ltk a b))))+      (send (enc n2-4 (ltk a b))))+    ((send (cat a n2-6)) (recv (cat n2-5 (enc n2-6 (ltk a b))))+      (send (enc n2-5 (ltk a b)))))+  (label 18)   (parent 15)-  (unrealized)+  (unrealized (7 1))   (comment "aborted"))  (defskeleton mass2
tst/missing_contraction.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from missing_contraction.scm")  (defprotocol missing-contraction basic   (defrole sender
tst/neuman-stubblebine-reauth.tst view
@@ -1,11951 +1,20353 @@-(comment "CPSA 2.2.10")-(comment "All input read")--(defprotocol neuman-stubblebine-reauth basic-  (defrole init-    (vars (a b ks name) (ra rb text) (k skey) (tb text))-    (trace (send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (defrole resp-    (vars (a b ks name) (ra rb text) (k skey) (tb text))-    (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (defrole init-reauth-    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))-    (trace (recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))-  (defrole resp-reauth-    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))-    (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))-  (defrole keyserver-    (vars (a b ks name) (ra rb text) (k skey) (tb text))-    (trace (recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    (uniq-orig k)))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))-  (label 0)-  (unrealized (0 2) (1 0))-  (origs (rb (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((2 1) (0 2)) ((2 1) (1 0)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb-0 (ltk b ks)) (1 0))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0))))-  (label 1)-  (parent 0)-  (unrealized (0 2) (1 2) (2 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 3 0 resp 2)-    (enc a ra-0 tb-0 (ltk b ks)) (2 0))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))))-  (label 2)-  (parent 1)-  (unrealized (0 2) (1 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp 2)-    (enc a ra-0 tb-0 (ltk b ks)) (2 0))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))))-  (label 3)-  (parent 1)-  (unrealized (0 2) (1 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb-prime k)-    (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb-prime k)))))-  (label 4)-  (parent 2)-  (unrealized (0 2) (3 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((3 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))-  (label 5)-  (parent 2)-  (unrealized (0 2) (3 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 6)-  (parent 2)-  (unrealized (0 2) (3 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((3 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv k) (send k)))-  (label 7)-  (parent 2)-  (unrealized (0 2) (3 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb-prime k)-    (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k)))))-  (label 8)-  (parent 3)-  (unrealized (0 2) (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 tb-1-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))-  (label 9)-  (parent 3)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 tb-1-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 10)-  (parent 3)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (deflistener k)-  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv k) (send k)))-  (label 11)-  (parent 3)-  (unrealized (0 2) (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (3 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 12)-  (parent 4)-  (unrealized (0 2) (3 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((3 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))-  (label 13)-  (parent 5)-  (unrealized (0 2) (3 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 14)-  (parent 6)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 1)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))-  (label 15)-  (parent 8)-  (unrealized (0 2) (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))-  (label 16)-  (parent 9)-  (unrealized (0 2) (4 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 17)-  (parent 10)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 0) (0 0)) ((3 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 4 2 keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (3 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 18)-  (parent 12)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 19)-  (parent 13)-  (unrealized (0 2) (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 20)-  (parent 13)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (3 0))-    ((3 1) (1 0)) ((3 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 4 1 resp-reauth 2)-    (enc ra-prime-0 k) (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))-  (label 21)-  (parent 13)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 22)-  (parent 13)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv k) (send k)))-  (label 23)-  (parent 13)-  (unrealized (0 2) (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 1) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 24)-  (parent 14)-  (unrealized (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 25)-  (parent 14)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb ra-prime rb-prime rb rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0))-    ((3 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 26)-  (parent 14)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 27)-  (parent 14)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))-  (label 28)-  (parent 14)-  (unrealized (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 2 keyserver 2)-    (enc b ra-1 k tb-0 (ltk a ks)) (4 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))-  (label 29)-  (parent 15)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-1-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 30)-  (parent 16)-  (unrealized (0 2) (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 31)-  (parent 16)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))-    ((4 1) (1 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))-  (label 32)-  (parent 16)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 33)-  (parent 16)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv k) (send k)))-  (label 34)-  (parent 16)-  (unrealized (0 2) (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 2 keyserver 2)-    (enc a k tb-0 (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 35)-  (parent 17)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 36)-  (parent 18)-  (unrealized (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 37)-  (parent 18)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb ra-prime rb-prime rb text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0))-    ((3 0) (0 0)) ((3 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 38)-  (parent 18)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (3 0)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 39)-  (parent 18)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv k) (send k)))-  (label 40)-  (parent 18)-  (unrealized (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 41)-  (parent 19)-  (unrealized (0 2) (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 42)-  (parent 20)-  (unrealized (0 2) (4 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 43)-  (parent 21)-  (unrealized (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 44)-  (parent 21)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 45)-  (parent 21)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv k) (send k)))-  (label 46)-  (parent 21)-  (unrealized (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 47)-  (parent 22)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 1) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 48)-  (parent 24)-  (unrealized (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 49)-  (parent 25)-  (unrealized (4 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 50)-  (parent 27)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 2 keyserver 2)-    (enc a k tb-0 (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 51)-  (parent 29)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 1)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))-  (label 52)-  (parent 30)-  (unrealized (0 2) (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 53)-  (parent 31)-  (unrealized (0 2) (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))-    ((4 1) (1 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 2 keyserver 2)-    (enc a k tb-0 (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))-  (label 54)-  (parent 32)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      rb-prime-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 55)-  (parent 33)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 56)-  (parent 35)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 57)-  (parent 35)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 58)-  (parent 35)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 59)-  (parent 35)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))-    ((4 1) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))-  (label 60)-  (parent 35)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 61)-  (parent 36)-  (unrealized (4 1))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 62)-  (parent 37)-  (unrealized (4 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 63)-  (parent 39)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 2 keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (4 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 64)-  (parent 41)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 65)-  (parent 42)-  (unrealized (0 2) (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 66)-  (parent 42)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (3 0))-    ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2)-    (enc ra-prime-1 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))))-  (label 67)-  (parent 42)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 68)-  (parent 42)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 69)-  (parent 42)-  (unrealized (0 2) (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 70)-  (parent 43)-  (unrealized (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 71)-  (parent 44)-  (unrealized (4 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 72)-  (parent 45)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 73)-  (parent 47)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 74)-  (parent 47)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb ra-prime rb-prime rb ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 75)-  (parent 47)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 76)-  (parent 47)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))-  (label 77)-  (parent 47)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 2 keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (4 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 78)-  (parent 48)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 79)-  (parent 49)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 80)-  (parent 49)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (4 2)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 81)-  (parent 49)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-1 (enc ra-prime-0 k)))))-  (label 82)-  (parent 49)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 83)-  (parent 49)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 84)-  (parent 51)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 85)-  (parent 51)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 86)-  (parent 51)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 87)-  (parent 51)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))-    ((4 2) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv k) (send k)))-  (label 88)-  (parent 51)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc b ra-1 k tb-0 (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))-  (label 89)-  (parent 52)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 90)-  (parent 53)-  (unrealized (0 2) (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 tb-1 text) (a b ks a-0 b-0 ks-0 name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 91)-  (parent 53)-  (unrealized (0 2) (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))))-  (label 92)-  (parent 53)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 93)-  (parent 53)-  (unrealized (0 2) (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 94)-  (parent 53)-  (unrealized (0 2) (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 95)-  (parent 54)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 96)-  (parent 54)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 97)-  (parent 54)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0))-    ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv k) (send k)))-  (label 98)-  (parent 54)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc a k tb-0 (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 99)-  (parent 55)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 100)-  (parent 56)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 101)-  (parent 57)-  (unrealized (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 102)-  (parent 59)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 103)-  (parent 62)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 104)-  (parent 62)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (4 2)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 105)-  (parent 62)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (4 1))-    (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 106)-  (parent 62)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 107)-  (parent 62)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 108)-  (parent 64)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 109)-  (parent 64)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb ra-prime rb-prime rb ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 110)-  (parent 64)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (4 0)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 111)-  (parent 64)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv k) (send k)))-  (label 112)-  (parent 64)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))-  (label 113)-  (parent 65)-  (unrealized (0 2) (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 114)-  (parent 66)-  (unrealized (0 2) (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 115)-  (parent 67)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 116)-  (parent 67)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 117)-  (parent 67)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 118)-  (parent 67)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 119)-  (parent 68)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 2 keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (4 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 120)-  (parent 70)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (3 1))-    (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 121)-  (parent 71)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 122)-  (parent 71)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 123)-  (parent 71)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 124)-  (parent 71)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 125)-  (parent 73)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 126)-  (parent 74)-  (unrealized (5 2))-  (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 127)-  (parent 76)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 128)-  (parent 79)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 129)-  (parent 80)-  (unrealized (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-1 (enc ra-prime-0 k)))))-  (label 130)-  (parent 82)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 131)-  (parent 84)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 132)-  (parent 85)-  (unrealized (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 133)-  (parent 87)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc a k tb-0 (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 134)-  (parent 89)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 1)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))-  (label 135)-  (parent 90)-  (unrealized (0 2) (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 136)-  (parent 91)-  (unrealized (0 2) (6 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc a k tb-0 (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))))-  (label 137)-  (parent 92)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 rb-prime-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 138)-  (parent 93)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 139)-  (parent 95)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 140)-  (parent 96)-  (unrealized (5 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 141)-  (parent 97)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 142)-  (parent 99)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 143)-  (parent 99)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 144)-  (parent 99)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 145)-  (parent 99)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))-    ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))-  (label 146)-  (parent 99)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc b ra-1 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 147)-  (parent 100)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 148)-  (parent 101)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 149)-  (parent 101)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((1 1) (5 2)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 150)-  (parent 101)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-1 (enc ra-prime-0 k)))))-  (label 151)-  (parent 101)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 152)-  (parent 101)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 153)-  (parent 103)-  (unrealized (5 1))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 154)-  (parent 104)-  (unrealized (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 155)-  (parent 106)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 156)-  (parent 108)-  (unrealized (5 1))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 157)-  (parent 109)-  (unrealized (5 2))-  (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 158)-  (parent 111)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))-  (label 159)-  (parent 113)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))-  (label 160)-  (parent 114)-  (unrealized (0 2) (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-2 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))-      (recv (cat ra-prime-2 (enc ra-prime-3 k)))-      (send (enc ra-prime-2 k))))-  (label 161)-  (parent 114)-  (unrealized (0 2) (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 3) (3 2))-    ((5 1) (1 0)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-2 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-1 (enc ra-prime k)))-      (send (enc ra-prime-1 k))))-  (label 162)-  (parent 114)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-2 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (send (cat rb-prime-0 (enc ra-prime-2 k)))))-  (label 163)-  (parent 114)-  (unrealized (0 2) (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-2 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))) ((recv k) (send k)))-  (label 164)-  (parent 114)-  (unrealized (0 2) (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 165)-  (parent 115)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 166)-  (parent 116)-  (unrealized (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 167)-  (parent 117)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 168)-  (parent 119)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))-  (label 169)-  (parent 119)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 170)-  (parent 119)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 171)-  (parent 119)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))) ((recv k) (send k)))-  (label 172)-  (parent 119)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 173)-  (parent 121)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 174)-  (parent 122)-  (unrealized (5 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 175)-  (parent 123)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 0) (0 0)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 176)-  (parent 125)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 177)-  (parent 126)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 178)-  (parent 126)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 1) (1 0)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 179)-  (parent 126)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((4 1) (5 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 4 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 180)-  (parent 126)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-1 (enc ra-prime-1 k)))))-  (label 181)-  (parent 126)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 182)-  (parent 126)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 0) (0 0))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 183)-  (parent 128)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 184)-  (parent 129)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 185)-  (parent 129)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (5 2)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (1 0))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))))-  (label 186)-  (parent 129)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-1 (enc ra-prime-1 k)))))-  (label 187)-  (parent 129)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 188)-  (parent 129)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc b ra-1 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 189)-  (parent 131)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 190)-  (parent 132)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 191)-  (parent 132)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (5 2)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 192)-  (parent 132)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 193)-  (parent 132)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 194)-  (parent 132)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 195)-  (parent 134)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 196)-  (parent 134)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 197)-  (parent 134)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 198)-  (parent 134)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))-    ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv k) (send k)))-  (label 199)-  (parent 134)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 7 2 keyserver 2)-    (enc b ra-1 k tb-0 (ltk a ks)) (6 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))-  (label 200)-  (parent 135)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(comment "Strand bound exceeded--aborting run")--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-2) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))-  (label 201)-  (parent 136)-  (unrealized (0 2) (7 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 ra-prime-3 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-3))-      (recv (cat ra-prime-2 (enc ra-prime-3 k)))-      (send (enc ra-prime-2 k))))-  (label 202)-  (parent 136)-  (unrealized (0 2) (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))-    ((6 1) (1 0)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 7 1 resp-reauth 2)-    (enc ra-prime-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (recv (cat ra-prime-1 (enc ra-prime k)))-      (send (enc ra-prime-1 k))))-  (label 203)-  (parent 136)-  (unrealized (0 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 rb-prime-0 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))-      (send (cat rb-prime-0 (enc ra-prime-2 k)))))-  (label 204)-  (parent 136)-  (unrealized (0 2) (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-2 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))) ((recv k) (send k)))-  (label 205)-  (parent 136)-  (unrealized (0 2) (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))-    ((5 3) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 206)-  (parent 137)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))-    ((5 3) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 207)-  (parent 137)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))-    ((5 3) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 208)-  (parent 137)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2))-    ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 209)-  (parent 137)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      rb-prime-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 7 2 keyserver 2)-    (enc a k tb-0 (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 210)-  (parent 138)-  (unrealized (0 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc b ra-1 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 211)-  (parent 139)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))-    ((5 3) (0 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 212)-  (parent 140)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))-    ((5 3) (0 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 213)-  (parent 140)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))-    ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 214)-  (parent 140)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))-    ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 215)-  (parent 140)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      ra-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 216)-  (parent 142)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 217)-  (parent 143)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      rb-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 218)-  (parent 145)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      ra-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 219)-  (parent 148)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 220)-  (parent 149)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      rb-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-1 (enc ra-prime-0 k)))))-  (label 221)-  (parent 151)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 0) (0 0)) ((3 2) (1 2))-    ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 222)-  (parent 154)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))-    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 223)-  (parent 154)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (5 2)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 1) (1 0)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))))-  (label 224)-  (parent 154)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))-    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 225)-  (parent 154)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))-    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 226)-  (parent 154)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((4 2) (5 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 4 init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 227)-  (parent 157)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))-    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 228)-  (parent 157)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 229)-  (parent 157)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 1) (1 0)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 230)-  (parent 157)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 231)-  (parent 157)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 232)-  (parent 157)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 233)-  (parent 159)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))-  (label 234)-  (parent 159)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))-  (label 235)-  (parent 159)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 236)-  (parent 159)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))-    ((recv k) (send k)))-  (label 237)-  (parent 159)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      ra-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-2))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))-  (label 238)-  (parent 160)-  (unrealized (0 2) (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      ra-prime-3 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-3))-      (recv (cat ra-prime-2 (enc ra-prime-3 k)))-      (send (enc ra-prime-2 k))))-  (label 239)-  (parent 161)-  (unrealized (0 2) (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))-    ((5 1) (1 0)) ((5 3) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-1 (enc ra-prime k)))-      (send (enc ra-prime-1 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 240)-  (parent 162)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))-    ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-1 (enc ra-prime k)))-      (send (enc ra-prime-1 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))-  (label 241)-  (parent 162)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))-    ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-1 (enc ra-prime k)))-      (send (enc ra-prime-1 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 242)-  (parent 162)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))-    ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-1 (enc ra-prime k)))-      (send (enc ra-prime-1 k))) ((recv k) (send k)))-  (label 243)-  (parent 162)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      rb-prime-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (send (cat rb-prime-0 (enc ra-prime-2 k)))))-  (label 244)-  (parent 163)-  (unrealized (0 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 0) (0 0)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 245)-  (parent 165)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))-    ((4 3) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 246)-  (parent 166)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((4 3) (5 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 4 init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 247)-  (parent 166)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))-    ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 248)-  (parent 166)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))-    ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 249)-  (parent 166)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))-    ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 250)-  (parent 166)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      ra-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 251)-  (parent 168)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      ra-prime-2 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))-  (label 252)-  (parent 169)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      rb-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 253)-  (parent 171)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 0) (0 0)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 2 keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 254)-  (parent 173)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))-    ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 255)-  (parent 174)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))-    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 256)-  (parent 174)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))-    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 257)-  (parent 174)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))-    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 258)-  (parent 174)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      ra-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))-  (label 259)-  (parent 177)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      ra-prime-2 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 260)-  (parent 178)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      rb-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-1 (enc ra-prime-1 k)))))-  (label 261)-  (parent 181)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      ra-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))-  (label 262)-  (parent 184)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      ra-prime-2 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 263)-  (parent 185)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      rb-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-1 (enc ra-prime-1 k)))))-  (label 264)-  (parent 187)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 265)-  (parent 190)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 266)-  (parent 191)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 267)-  (parent 193)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 268)-  (parent 195)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 269)-  (parent 196)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 270)-  (parent 198)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 7 2 keyserver 2)-    (enc a k tb-0 (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))-  (label 271)-  (parent 200)-  (unrealized (0 2))+(comment "CPSA 2.2.11")+(comment "All input read from neuman-stubblebine-reauth.lsp")++(defprotocol neuman-stubblebine-reauth basic+  (defrole init+    (vars (a b ks name) (ra rb text) (k skey) (tb text))+    (trace (send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (defrole resp+    (vars (a b ks name) (ra rb text) (k skey) (tb text))+    (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (defrole init-reauth+    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))+    (trace (recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+  (defrole resp-reauth+    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))+    (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))+  (defrole keyserver+    (vars (a b ks name) (ra rb text) (k skey) (tb text))+    (trace (recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    (uniq-orig k)))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))+  (label 0)+  (unrealized (0 2) (1 0))+  (origs (rb (0 1)) (rb-prime (1 1)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((2 1) (0 2)) ((2 1) (1 0)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a k tb-0 (ltk b ks)) (1 0))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0))))+  (label 1)+  (parent 0)+  (unrealized (0 2) (1 2) (2 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 3 0 resp 2)+    (enc a ra-0 tb-0 (ltk b ks)) (2 0))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))))+  (label 2)+  (parent 1)+  (unrealized (0 2) (1 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp 2)+    (enc a ra-0 tb-0 (ltk b ks)) (2 0))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))))+  (label 3)+  (parent 1)+  (unrealized (0 2) (1 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb-prime k)+    (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb-prime k)))))+  (label 4)+  (parent 2)+  (unrealized (0 2) (3 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((3 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 5)+  (parent 2)+  (unrealized (0 2) (3 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 6)+  (parent 2)+  (unrealized (0 2) (3 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((3 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv k) (send k)))+  (label 7)+  (parent 2)+  (unrealized (0 2) (3 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb-prime k)+    (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k)))))+  (label 8)+  (parent 3)+  (unrealized (0 2) (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 tb-1+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 9)+  (parent 3)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 tb-1+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 10)+  (parent 3)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (deflistener k)+  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv k) (send k)))+  (label 11)+  (parent 3)+  (unrealized (0 2) (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (3 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 12)+  (parent 4)+  (unrealized (0 2) (3 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((3 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 13)+  (parent 5)+  (unrealized (0 2) (3 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 14)+  (parent 6)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 1)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))+  (label 15)+  (parent 8)+  (unrealized (0 2) (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 16)+  (parent 9)+  (unrealized (0 2) (4 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 17)+  (parent 10)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 0) (0 0)) ((3 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 4 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (3 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 18)+  (parent 12)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 19)+  (parent 13)+  (unrealized (0 2) (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 20)+  (parent 13)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (3 0))+    ((3 1) (1 0)) ((3 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 4 1 resp-reauth 2)+    (enc ra-prime-0 k) (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+  (label 21)+  (parent 13)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 22)+  (parent 13)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv k) (send k)))+  (label 23)+  (parent 13)+  (unrealized (0 2) (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 1) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 24)+  (parent 14)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 25)+  (parent 14)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0))+    ((3 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 26)+  (parent 14)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 27)+  (parent 14)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))+  (label 28)+  (parent 14)+  (unrealized (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc b ra-1 k tb-0 (ltk a ks)) (4 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))+  (label 29)+  (parent 15)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-1+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 30)+  (parent 16)+  (unrealized (0 2) (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 31)+  (parent 16)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))+    ((4 1) (1 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+  (label 32)+  (parent 16)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 33)+  (parent 16)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv k) (send k)))+  (label 34)+  (parent 16)+  (unrealized (0 2) (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 35)+  (parent 17)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 36)+  (parent 18)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 37)+  (parent 18)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0))+    ((3 0) (0 0)) ((3 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 38)+  (parent 18)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 39)+  (parent 18)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv k) (send k)))+  (label 40)+  (parent 18)+  (unrealized (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 41)+  (parent 19)+  (unrealized (0 2) (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 42)+  (parent 20)+  (unrealized (0 2) (4 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 43)+  (parent 21)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 44)+  (parent 21)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 45)+  (parent 21)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv k) (send k)))+  (label 46)+  (parent 21)+  (unrealized (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 47)+  (parent 22)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 1) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 48)+  (parent 24)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 49)+  (parent 25)+  (unrealized (4 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 50)+  (parent 27)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 51)+  (parent 29)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 1)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))+  (label 52)+  (parent 30)+  (unrealized (0 2) (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 53)+  (parent 31)+  (unrealized (0 2) (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))+    ((4 1) (1 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+  (label 54)+  (parent 32)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 55)+  (parent 33)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 56)+  (parent 35)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 57)+  (parent 35)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0))+    ((3 1) (2 0)) ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 58)+  (parent 35)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 59)+  (parent 35)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))+    ((4 1) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))+  (label 60)+  (parent 35)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 61)+  (parent 36)+  (unrealized (4 1))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 62)+  (parent 37)+  (unrealized (4 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 63)+  (parent 39)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (4 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 64)+  (parent 41)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 65)+  (parent 42)+  (unrealized (0 2) (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 66)+  (parent 42)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2)+    (enc ra-prime-1 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 67)+  (parent 42)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 68)+  (parent 42)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 69)+  (parent 42)+  (unrealized (0 2) (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 70)+  (parent 43)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 71)+  (parent 44)+  (unrealized (4 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 72)+  (parent 45)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 73)+  (parent 47)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 74)+  (parent 47)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 75)+  (parent 47)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 76)+  (parent 47)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))+  (label 77)+  (parent 47)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (4 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 78)+  (parent 48)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 79)+  (parent 49)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 80)+  (parent 49)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (4 2)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 81)+  (parent 49)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 82)+  (parent 49)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 83)+  (parent 49)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 84)+  (parent 51)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 85)+  (parent 51)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0))+    ((3 1) (2 0)) ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 86)+  (parent 51)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 87)+  (parent 51)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))+    ((4 2) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv k) (send k)))+  (label 88)+  (parent 51)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-1 k tb-0 (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))+  (label 89)+  (parent 52)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 90)+  (parent 53)+  (unrealized (0 2) (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 tb-1 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 91)+  (parent 53)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 92)+  (parent 53)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 93)+  (parent 53)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 94)+  (parent 53)+  (unrealized (0 2) (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 95)+  (parent 54)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 96)+  (parent 54)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 97)+  (parent 54)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0))+    ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv k) (send k)))+  (label 98)+  (parent 54)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 99)+  (parent 55)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 100)+  (parent 56)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 101)+  (parent 57)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 102)+  (parent 59)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 103)+  (parent 62)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 104)+  (parent 62)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (4 2)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 105)+  (parent 62)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (4 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 106)+  (parent 62)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 107)+  (parent 62)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 108)+  (parent 64)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 109)+  (parent 64)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 110)+  (parent 64)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 111)+  (parent 64)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv k) (send k)))+  (label 112)+  (parent 64)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 113)+  (parent 65)+  (unrealized (0 2) (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 114)+  (parent 66)+  (unrealized (0 2) (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 115)+  (parent 67)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 116)+  (parent 67)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 117)+  (parent 67)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 118)+  (parent 67)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 119)+  (parent 68)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (4 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 120)+  (parent 70)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (3 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 121)+  (parent 71)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 122)+  (parent 71)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 123)+  (parent 71)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 124)+  (parent 71)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 125)+  (parent 73)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 126)+  (parent 74)+  (unrealized (5 2))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 127)+  (parent 76)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 128)+  (parent 79)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 129)+  (parent 80)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 130)+  (parent 82)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 131)+  (parent 84)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 132)+  (parent 85)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 133)+  (parent 87)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 134)+  (parent 89)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 1)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))+  (label 135)+  (parent 90)+  (unrealized (0 2) (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 136)+  (parent 91)+  (unrealized (0 2) (6 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 137)+  (parent 92)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 138)+  (parent 93)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 139)+  (parent 95)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 140)+  (parent 96)+  (unrealized (5 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 141)+  (parent 97)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 142)+  (parent 99)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 143)+  (parent 99)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 144)+  (parent 99)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 145)+  (parent 99)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))+    ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))+  (label 146)+  (parent 99)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 147)+  (parent 100)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 148)+  (parent 101)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 149)+  (parent 101)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((1 1) (5 2)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 150)+  (parent 101)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 151)+  (parent 101)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 152)+  (parent 101)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 153)+  (parent 103)+  (unrealized (5 1))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 154)+  (parent 104)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 155)+  (parent 106)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 156)+  (parent 108)+  (unrealized (5 1))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 157)+  (parent 109)+  (unrealized (5 2))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 158)+  (parent 111)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 159)+  (parent 113)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 160)+  (parent 114)+  (unrealized (0 2) (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 161)+  (parent 114)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-2 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))))+  (label 162)+  (parent 114)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 163)+  (parent 114)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 164)+  (parent 114)+  (unrealized (0 2) (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 165)+  (parent 115)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 166)+  (parent 116)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 167)+  (parent 117)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 168)+  (parent 119)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 169)+  (parent 119)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 170)+  (parent 119)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 171)+  (parent 119)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))) ((recv k) (send k)))+  (label 172)+  (parent 119)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 173)+  (parent 121)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 174)+  (parent 122)+  (unrealized (5 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 175)+  (parent 123)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 0) (0 0)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 176)+  (parent 125)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 177)+  (parent 126)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 178)+  (parent 126)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 1) (1 0)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 179)+  (parent 126)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((4 1) (5 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 4 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 180)+  (parent 126)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 181)+  (parent 126)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 182)+  (parent 126)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 0) (0 0))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 183)+  (parent 128)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 184)+  (parent 129)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 185)+  (parent 129)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (5 2)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (1 0))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 186)+  (parent 129)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 187)+  (parent 129)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 188)+  (parent 129)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 189)+  (parent 131)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 190)+  (parent 132)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 191)+  (parent 132)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (5 2)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 192)+  (parent 132)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 193)+  (parent 132)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 194)+  (parent 132)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 195)+  (parent 134)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 196)+  (parent 134)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 197)+  (parent 134)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 198)+  (parent 134)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))+    ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv k) (send k)))+  (label 199)+  (parent 134)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-1 k tb-0 (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))+  (label 200)+  (parent 135)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))+    ((6 1) (1 0)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))))+  (label 203)+  (parent 136)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 206)+  (parent 137)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 207)+  (parent 137)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 208)+  (parent 137)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2))+    ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 209)+  (parent 137)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 210)+  (parent 138)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 211)+  (parent 139)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 212)+  (parent 140)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 213)+  (parent 140)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 214)+  (parent 140)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 215)+  (parent 140)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 216)+  (parent 142)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 217)+  (parent 143)+  (unrealized (6 2))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 218)+  (parent 145)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 219)+  (parent 148)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 220)+  (parent 149)+  (unrealized (6 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 221)+  (parent 151)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 222)+  (parent 154)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 223)+  (parent 154)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (5 2)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 1) (1 0)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 224)+  (parent 154)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (5 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 225)+  (parent 154)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 226)+  (parent 154)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((4 2) (5 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 4 init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 227)+  (parent 157)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 228)+  (parent 157)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 229)+  (parent 157)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 1) (1 0)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 230)+  (parent 157)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (5 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 231)+  (parent 157)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 232)+  (parent 157)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 233)+  (parent 159)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 234)+  (parent 159)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 235)+  (parent 159)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 236)+  (parent 159)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv k) (send k)))+  (label 237)+  (parent 159)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-2))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))+  (label 238)+  (parent 160)+  (unrealized (0 2) (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 239)+  (parent 161)+  (unrealized (0 2) (6 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 240)+  (parent 162)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 241)+  (parent 162)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 242)+  (parent 162)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 243)+  (parent 162)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 244)+  (parent 163)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 0) (0 0)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 245)+  (parent 165)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (ra-prime (4 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 246)+  (parent 166)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((4 3) (5 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 4 init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 247)+  (parent 166)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 248)+  (parent 166)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 249)+  (parent 166)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 250)+  (parent 166)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 251)+  (parent 168)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 252)+  (parent 169)+  (unrealized (6 2))+  (comment "7 in cohort - 7 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 253)+  (parent 171)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 0) (0 0)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 254)+  (parent 173)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (ra-prime (3 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 255)+  (parent 174)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 256)+  (parent 174)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 257)+  (parent 174)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 258)+  (parent 174)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 259)+  (parent 177)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 260)+  (parent 178)+  (unrealized (6 2))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 261)+  (parent 181)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 262)+  (parent 184)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 263)+  (parent 185)+  (unrealized (6 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 264)+  (parent 187)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 265)+  (parent 190)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 266)+  (parent 191)+  (unrealized (6 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 267)+  (parent 193)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 268)+  (parent 195)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 269)+  (parent 196)+  (unrealized (6 2))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 270)+  (parent 198)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 271)+  (parent 200)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))+    ((6 1) (1 0)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))))+  (label 272)+  (parent 203)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 273)+  (parent 206)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 274)+  (parent 207)+  (unrealized (6 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 275)+  (parent 208)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 ra-prime-1+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 278)+  (parent 210)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 281)+  (parent 212)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 282)+  (parent 213)+  (unrealized (6 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 283)+  (parent 214)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 284)+  (parent 216)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((1 1) (6 2)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 1) (1 0)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 287)+  (parent 217)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((5 1) (6 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 5 resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 288)+  (parent 217)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 291)+  (parent 219)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((1 1) (6 2)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (1 0)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 294)+  (parent 220)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 297)+  (parent 222)+  (unrealized (6 1))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 298)+  (parent 223)+  (unrealized (6 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 299)+  (parent 225)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 300)+  (parent 228)+  (unrealized (6 1))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 301)+  (parent 229)+  (unrealized (6 2))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 302)+  (parent 231)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 303)+  (parent 233)+  (unrealized (6 1))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 304)+  (parent 234)+  (unrealized (6 2))+  (comment "7 in cohort - 7 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 305)+  (parent 236)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-2))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))+  (label 306)+  (parent 238)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-3 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-2 (enc ra-prime k)))+      (send (enc ra-prime-2 k))))+  (label 309)+  (parent 239)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 312)+  (parent 240)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 313)+  (parent 241)+  (unrealized (6 2))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 314)+  (parent 242)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 317)+  (parent 244)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 320)+  (parent 246)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 321)+  (parent 248)+  (unrealized (6 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 322)+  (parent 249)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 0) (0 0)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 323)+  (parent 251)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((4 3) (6 2)) ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 4 init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 325)+  (parent 252)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (1 0)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 327)+  (parent 252)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((5 1) (6 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 5 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 328)+  (parent 252)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 331)+  (parent 255)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 332)+  (parent 256)+  (unrealized (6 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 333)+  (parent 257)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 0) (0 0)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 334)+  (parent 259)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (1 0)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))))+  (label 337)+  (parent 260)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((4 1) (6 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 4 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat ra-prime-1 (enc ra-prime-0 k)))+      (send (enc ra-prime-1 k))))+  (label 338)+  (parent 260)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 0) (0 0)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 341)+  (parent 262)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (6 2)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))))+  (label 344)+  (parent 263)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 347)+  (parent 265)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (6 2)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (1 0)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 350)+  (parent 266)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 353)+  (parent 268)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((5 2) (6 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 5 init 3) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 354)+  (parent 269)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((1 1) (6 2)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 1) (1 0)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 357)+  (parent 269)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 362)+  (parent 271)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 369)+  (parent 273)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((5 3) (6 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 5 init-reauth 4)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 371)+  (parent 274)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 375)+  (parent 281)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (6 2)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))))+  (label 382)+  (parent 298)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (6 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((4 2) (6 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 4 init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat ra-prime-1 (enc ra-prime-0 k)))+      (send (enc ra-prime-1 k))))+  (label 385)+  (parent 301)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (1 0))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))))+  (label 388)+  (parent 301)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (6 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((5 2) (6 2))+    ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 5 init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 391)+  (parent 304)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((4 3) (6 2)) ((5 0) (0 0)) ((5 2) (4 2))+    ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 4 init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 393)+  (parent 304)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (1 0))+    ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 395)+  (parent 304)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (ra-prime (6 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 ra-prime-2 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-2))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))+  (label 400)+  (parent 306)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (6 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 0) (0 0)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 407)+  (parent 312)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (ra-prime (5 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((4 3) (6 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 4 init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 409)+  (parent 313)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((5 3) (6 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 5 init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 410)+  (parent 313)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 0) (0 0)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 414)+  (parent 320)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (ra-prime (4 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((4 3) (6 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 4 init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat ra-prime-1 (enc ra-prime-0 k)))+      (send (enc ra-prime-1 k))))+  (label 416)+  (parent 321)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 0) (0 0)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 420)+  (parent 331)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (ra-prime (3 1))+    (rb-prime (1 1))))++(comment "Strand bound exceeded--aborting run")++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-2) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 201)+  (parent 136)+  (unrealized (0 2) (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 ra-prime-3 tb-1 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 202)+  (parent 136)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 rb-prime-0 tb-1 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 204)+  (parent 136)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 205)+  (parent 136)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (7 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)) ((7 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 276)+  (parent 210)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (7 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)) ((7 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 277)+  (parent 210)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (7 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 279)+  (parent 210)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))) ((recv k) (send k)))+  (label 280)+  (parent 210)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 285)+  (parent 217)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 286)+  (parent 217)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 289)+  (parent 217)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 290)+  (parent 217)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 1) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 292)+  (parent 220)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 293)+  (parent 220)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 295)+  (parent 220)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 296)+  (parent 220)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-3) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((2 1) (7 1)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))+    ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-3 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-3 k)))))+  (label 307)+  (parent 239)+  (unrealized (0 2) (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 ra-prime-4 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-4) (rb-prime ra-prime-3)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((2 1) (7 0)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))+    ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-3 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-4))+      (recv (cat ra-prime-3 (enc ra-prime-4 k)))+      (send (enc ra-prime-3 k))))+  (label 308)+  (parent 239)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-3) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((2 1) (7 0)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))+    ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-3 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (send (cat rb-prime-0 (enc ra-prime-3 k)))))+  (label 310)+  (parent 239)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((2 1) (7 0)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))+    ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-3 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))) ((recv k) (send k)))+  (label 311)+  (parent 239)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))+    ((7 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 315)+  (parent 244)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))+    ((7 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat rb (enc ra-prime-3 k))) (send (enc rb k))))+  (label 316)+  (parent 244)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))+    ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 318)+  (parent 244)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))+    ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))) ((recv k) (send k)))+  (label 319)+  (parent 244)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-prime-2 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))+    ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 324)+  (parent 252)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-prime-2 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))+    ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 326)+  (parent 252)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-prime-2 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-1 (enc ra-prime-2 k)))))+  (label 329)+  (parent 252)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 330)+  (parent 252)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-prime-2 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))+    ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+    ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 335)+  (parent 260)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-prime-2 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+    ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 336)+  (parent 260)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-prime-2 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-1 (enc ra-prime-2 k)))))+  (label 339)+  (parent 260)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 340)+  (parent 260)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-prime-2 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 342)+  (parent 263)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-prime-2 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 343)+  (parent 263)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-prime-2 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-1 (enc ra-prime-2 k)))))+  (label 345)+  (parent 263)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 346)+  (parent 263)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 2) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 348)+  (parent 266)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 349)+  (parent 266)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 351)+  (parent 266)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 352)+  (parent 266)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 355)+  (parent 269)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 356)+  (parent 269)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 358)+  (parent 269)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 359)+  (parent 269)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (7 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 360)+  (parent 271)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (7 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 361)+  (parent 271)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (7 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 363)+  (parent 271)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv k) (send k)))+  (label 364)+  (parent 271)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (7 1)) ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)) ((7 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 365)+  (parent 272)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (7 2)) ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)) ((7 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 366)+  (parent 272)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (7 0)) ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 367)+  (parent 272)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))+    ((6 1) (1 0)) ((6 3) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 368)+  (parent 272)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 370)+  (parent 274)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 372)+  (parent 274)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 373)+  (parent 274)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 374)+  (parent 274)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 1) (1 0))+    ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 376)+  (parent 282)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 0))+    ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 377)+  (parent 282)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 0))+    ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 378)+  (parent 282)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 0))+    ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 379)+  (parent 282)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 0) (0 0))+    ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+    ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 380)+  (parent 298)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 0) (0 0))+    ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+    ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 381)+  (parent 298)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 0) (0 0))+    ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 383)+  (parent 298)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 0) (0 0))+    ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 384)+  (parent 298)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))+    ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))+    ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 386)+  (parent 301)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))+    ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 387)+  (parent 301)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))+    ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 389)+  (parent 301)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))+    ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 390)+  (parent 301)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))+    ((6 3) (0 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 392)+  (parent 304)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))+    ((6 3) (0 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 394)+  (parent 304)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))+    ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 396)+  (parent 304)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))+    ((6 3) (0 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 397)+  (parent 304)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+    ((6 2) (5 2)) ((7 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-2))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 398)+  (parent 306)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+    ((6 2) (5 2)) ((7 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-2))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat rb (enc ra-prime-3 k))) (send (enc rb k))))+  (label 399)+  (parent 306)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+    ((6 2) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-2))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 401)+  (parent 306)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+    ((6 2) (5 2)) ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-2))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))+    ((recv k) (send k)))+  (label 402)+  (parent 306)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))+    ((7 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-2 (enc ra-prime k)))+      (send (enc ra-prime-2 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 403)+  (parent 309)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))+    ((7 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-2 (enc ra-prime k)))+      (send (enc ra-prime-2 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat rb (enc ra-prime-3 k))) (send (enc rb k))))+  (label 404)+  (parent 309)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))+    ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-2 (enc ra-prime k)))+      (send (enc ra-prime-2 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 405)+  (parent 309)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))+    ((7 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-2 (enc ra-prime k)))+      (send (enc ra-prime-2 k))) ((recv k) (send k)))+  (label 406)+  (parent 309)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))+    ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 408)+  (parent 313)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))+    ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 411)+  (parent 313)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 412)+  (parent 313)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 413)+  (parent 313)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 3) (1 2))+    ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+    ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 415)+  (parent 321)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+    ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+    ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 417)+  (parent 321)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+    ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 418)+  (parent 321)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+    ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 419)+  (parent 321)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (1 0))+    ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+    ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 421)+  (parent 332)+  (unrealized (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 0))+    ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+    ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 422)+  (parent 332)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 0))+    ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 423)+  (parent 332)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 0))+    ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+    ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 424)+  (parent 332)+  (unrealized (7 0))   (comment "aborted"))
tst/neuman-stubblebine.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from neuman-stubblebine.scm")  (defprotocol neuman-stubblebine basic   (defrole init
tst/no_contraction.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from no_contraction.scm")  (defprotocol no-contraction basic   (defrole init
tst/non_transforming.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from non_transforming.scm")  (defprotocol non_transforming basic   (defrole sender
tst/nonaug-prune.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from nonaug-prune.scm")  (defprotocol nonaug-prune basic   (defrole orig
tst/ns-l.tst view
@@ -1,8 +1,8 @@ (herald "Needham-Schroeder-Low Public-Key Protocol"   (comment "With deflistener's")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from ns-l.scm")  (defprotocol ns basic   (defrole init
tst/ns.tst view
@@ -1,7 +1,7 @@ (herald "Needham-Schroeder Public-Key Protocol Variants") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from ns.scm")  (defprotocol ns basic   (defrole init
tst/nsl3.tst view
@@ -1,7 +1,7 @@ (herald "Three Party Needham-Schroeder-Lowe Protocol") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from nsl3.scm")  (defprotocol nsl3 basic   (defrole init
tst/nsl4cm1.tst view

file too large to diff

tst/nslsk.tst view
@@ -1,7 +1,7 @@ (herald "Needham-Schroeder-Lowe Protocol with symmetric encryption") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from nslsk.scm")  (defprotocol nslsk basic   (defrole init
tst/or.tst view
@@ -1,8 +1,8 @@ (herald "Otway-Rees Protocol"   (comment "Standard version using variables of sort mesg")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from or.scm")  (defprotocol or basic   (defrole init
tst/pca.tst view
@@ -1,8 +1,8 @@ (herald "Privacy Certificate Authority" (bound 15)   (comment "Generation of an Attestation Identity Certificate")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from pca.scm") (comment "Strand count bounded at 15")  (defprotocol pca basic
tst/pen-non-orig-test.tst view
@@ -1,7 +1,7 @@ (herald "pen-non-orig test") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from pen-non-orig-test.scm")  (defprotocol pennonorigtest basic   (defrole client
tst/pkinit.tst view
@@ -1,7 +1,7 @@ (herald "Kerberos PK init") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from pkinit.scm")  (defprotocol pkinit basic   (defrole client
tst/preprocess.tst view
@@ -1,7 +1,7 @@ (herald "Pre-processing test example: modified NS with two responders") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from preprocess.scm")  (defprotocol ns basic   (defrole init
tst/print.tst view
@@ -1,8 +1,8 @@ (herald "Print Test"   (comment "See if read forms look like printed ones")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from print.scm")  (defprotocol print-test basic   (defrole role
tst/pruning1.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from pruning1.scm")  (defprotocol prune basic   (defrole init
tst/sigenc.tst view
@@ -1,8 +1,8 @@ (herald "Signed Encrypted Message Example"   (comment "Shows examples of key usage of asymmetric keys")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from sigenc.scm")  (defprotocol mult-keys-sig-enc basic   (defrole init
tst/sorted_epmo_acctnum.tst view
@@ -4,8 +4,8 @@     "This version uses sorts to avoid confusion"     "between a nonce and other data")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from sorted_epmo_acctnum.scm") (comment "Strand count bounded at 12")  (defprotocol sorted_epmo_acctnum basic
tst/targetterms2.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from targetterms2.scm")  (defprotocol targetterms2 basic   (defrole init
tst/targetterms6.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from targetterms6.scm")  (defprotocol targetterms6 basic   (defrole init
tst/targetterms8.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from targetterms8.scm")  (defprotocol targetterms8 basic   (defrole init
tst/timestamping.tst view
@@ -1,7 +1,7 @@ (herald timestamping-service) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from timestamping.scm")  (defprotocol timestamping-service basic   (defrole client
tst/tor.tst view
@@ -1,8 +1,8 @@ (herald "Tor Circuit-Level Handshake Protocol" (algebra diffie-hellman)   (comment "Achieves unilateral authentication")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from tor.scm")  (defprotocol tor diffie-hellman   (defrole init
tst/uncarried_keys.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from uncarried_keys.scm")  (defprotocol uncarried-keys basic   (defrole init
tst/uo.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from uo.scm")  (defprotocol uniq-orig basic   (defrole init (vars (n text)) (trace (send n)) (uniq-orig n))
tst/wang-hash.tst view
@@ -1,7 +1,7 @@ (herald "Wang's Fair Exchange Protocol" (bound 10)) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from wang-hash.scm") (comment "Strand count bounded at 10")  (defprotocol wang basic
tst/wang-key-hash.tst view
@@ -1,7 +1,7 @@ (herald "Wang's Fair Exchange Protocol" (bound 10)) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from wang-key-hash.scm") (comment "Strand count bounded at 10")  (defprotocol wang basic
tst/weird.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from weird.scm")  (defprotocol weird basic   (defrole originator (vars (k skey)) (trace (send k)) (uniq-orig k))
tst/wide-mouth-frog-scyther.tst view
@@ -1,8 +1,8 @@ (herald "Wide-Mouth Frog Protocol from Scyther"   (comment "This protocol has an infinite number of shapes")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from wide-mouth-frog-scyther.lsp")  (defprotocol wide-mouth-frog basic   (defrole init
tst/wide-mouth-frog.tst view
@@ -1,8 +1,8 @@ (herald "Wide-Mouth Frog Protocol"   (comment "This protocol has an infinite number of shapes")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from wide-mouth-frog.lsp")  (defprotocol wide-mouth-frog basic   (defrole init
tst/wonthull.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from wonthull.scm")  (defprotocol wonthull basic   (defrole init
tst/wonthull2.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from wonthull2.scm")  (defprotocol wonthull2 basic   (defrole init
tst/wonthull3.tst view
@@ -1,5 +1,5 @@-(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from wonthull3.scm")  (defprotocol wonthull3 basic   (defrole init
tst/woolam.tst view
@@ -1,7 +1,7 @@ (herald "Woo-Lam Protocol") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from woolam.scm")  (defprotocol woolam basic   (defrole init
tst/yahalom-6.3.6.tst view
@@ -4,8 +4,8 @@     "Yahalom Protocol, Section 6.3.6, Page 49")   (url "http://www.eecs.umich.edu/acal/swerve/docs/49-1.pdf")) -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from yahalom-6.3.6.scm")  (defprotocol yahalom basic   (defrole init
tst/yahalom.tst view
@@ -1,7 +1,7 @@ (herald "Yahalom Protocol Without Forwarding") -(comment "CPSA 2.2.10")-(comment "All input read")+(comment "CPSA 2.2.11")+(comment "All input read from yahalom.scm")  (defprotocol yahalom basic   (defrole init